last executing test programs: 7m26.423296513s ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) sendfile(0xffffffffffffffff, r1, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7m24.3948518s ago: executing program 1 (id=9): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x20, 0xa, 0xc, "2eabd43955bc2a3400024683"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe, 0x28, "f9896cfb3e57c0f9b23ec9ae134e7044bca703501dcf9cade46487d331d33b3b57f2e6af1c2297f0"}, 0x0, 0x0}) 7m18.605057512s ago: executing program 3 (id=13): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x2090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x14, 0x31, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x2}, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 7m14.355594341s ago: executing program 1 (id=16): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0xd070, 0x0, 0x0, 0x0) 7m13.096584879s ago: executing program 3 (id=19): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) 7m12.04033622s ago: executing program 1 (id=21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) bind$802154_raw(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280), 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x12042, 0x1}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040045, 0x0, 0x0) 7m11.929586286s ago: executing program 0 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 7m11.656979702s ago: executing program 3 (id=23): openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x10140, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r3, 0x0, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000240)={0xa, 0x0, [{0x4, 0x2, 0x2, 0x5, 0x400, 0x2, 0x3aa}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0xb, 0x6, 0x0, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x5, 0x807, 0x2, 0x2}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x1, 0xa, 0x5, 0xd0b, 0xd5}]}) 7m7.741888664s ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x151) fcntl$notify(r0, 0x402, 0x8000001f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 7m7.669400347s ago: executing program 0 (id=26): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) poll(&(0x7f0000000840)=[{r0, 0x8104}], 0x1, 0x3) 7m3.574108492s ago: executing program 1 (id=28): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) socket$nl_route(0x10, 0x3, 0x0) 7m3.472012322s ago: executing program 0 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000004, 0x0, 0x0) 6m58.779372645s ago: executing program 1 (id=30): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x80, 0x7800, 0x801, 0x7ff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={0x0, 0x16c}, 0x1, 0x0, 0x0, 0x20d0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffffffffffff39) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000a0, 0x4a) 6m58.311137621s ago: executing program 0 (id=31): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r0 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6m57.262423789s ago: executing program 32 (id=20): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default us'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000002000)="32fdbad258b2ecd61e1d0d6c4857a27679e157702ce6ef94417ba903ff0db1aa4c8f4ac86476993af42392cacfd2cc83bc5f921c3d0e537ccb3a3ef68571270bae6a76bbfdfea8778b3e065ab783057d593ae327b66167ca928594f7794d0dd74005c860c53ea65373d68884e62764b06ab5", 0x72, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) fcntl$dupfd(r3, 0x0, r3) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 6m56.96163752s ago: executing program 0 (id=33): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) 6m55.940181429s ago: executing program 0 (id=34): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xb, 0x6, 0x5, 0x1ff, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="41000200010001", 0x7) 6m55.615389767s ago: executing program 33 (id=23): openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x10140, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r3, 0x0, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000240)={0xa, 0x0, [{0x4, 0x2, 0x2, 0x5, 0x400, 0x2, 0x3aa}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0xb, 0x6, 0x0, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x5, 0x807, 0x2, 0x2}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x1, 0xa, 0x5, 0xd0b, 0xd5}]}) 6m41.586201227s ago: executing program 34 (id=30): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x80, 0x7800, 0x801, 0x7ff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={0x0, 0x16c}, 0x1, 0x0, 0x0, 0x20d0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffffffffffff39) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000a0, 0x4a) 6m40.578428157s ago: executing program 35 (id=34): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xb, 0x6, 0x5, 0x1ff, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="41000200010001", 0x7) 4m36.526562795s ago: executing program 4 (id=118): socket$alg(0x26, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x400084, 0x81, &(0x7f0000000180)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbb00019078ac1e0004ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="0e0087ed03028700"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x2c048010) ftruncate(0xffffffffffffffff, 0xe8) 4m33.617612257s ago: executing program 4 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm'], 0xa) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) socketpair$unix(0x1, 0xcdfb1e3e5376233e, 0x0, &(0x7f00000002c0)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)={'c', ' *:* ', 'rwm\x00'}, 0xa) r3 = syz_open_procfs(r0, &(0x7f0000000080)='net/rt_acct\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1e}, 0x0, 0x40010000, 0x1}) r4 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r4}) 4m32.150359171s ago: executing program 4 (id=122): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4eb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r1 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m31.216124521s ago: executing program 4 (id=124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 4m30.460698006s ago: executing program 4 (id=126): ioperm(0x1, 0x9, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7}) clock_gettime(0xfffffffffffffffb, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/67) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x37, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80f}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc65}}, {0x0, 0x0}, {0x78, &(0x7f0000000440)=ANY=[@ANYBLOB="7803a326f09bdf223c3ee2367cbe947a4f45ae7f41a030085ba711a4ce190330633286305fb0e8a79278ee129e6d20ace81384f608823f947cb70d7db7dead993c712b14595fbc3e11c68556252180d8d1e5ba6eff8c16e25bdb14048c85bb1bafd8150d59082187106a3e006ba0bb4ed53e36ee3b4e7efc904b231d0492fcf106"]}, {0x2, &(0x7f0000000780)=@string={0x2}}, {0x53, &(0x7f00000007c0)=ANY=[@ANYBLOB="53038110239a8b03e646b877b61bb193055285832aeb996cb16e676da1a34d7b02ff1ef73b2f3837c28ecc0ffbaca0e3fa6bdcfa2b22888d21b3296dd9bdea72f006de6de1ccfd1faff53f04a8476c0288adb7"]}]}) fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000080)={0x80}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001"], 0x0) 4m26.518549095s ago: executing program 4 (id=130): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0xc0000001, 0x100, 0x4, 0x6, 0x20000b, 0x2, 0x6}, {0x80000000, 0x222be, 0x0, 0xd, 0x3, 0x107fd, 0x6}]}) r5 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r5, 0x0, 0x10020) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x6818a27e0f9149b7) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4m11.263246606s ago: executing program 36 (id=130): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0xc0000001, 0x100, 0x4, 0x6, 0x20000b, 0x2, 0x6}, {0x80000000, 0x222be, 0x0, 0xd, 0x3, 0x107fd, 0x6}]}) r5 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r5, 0x0, 0x10020) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x6818a27e0f9149b7) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3m50.253990386s ago: executing program 6 (id=156): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x208, 0x2c41) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x2, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) 3m47.384201571s ago: executing program 6 (id=158): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x4394) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3m43.122902228s ago: executing program 6 (id=160): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) 3m40.775562035s ago: executing program 6 (id=162): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e0001000000002d000000000002000000010000000000000037b8ad06c2c9e262"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 3m33.153939036s ago: executing program 6 (id=166): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sysfs$2(0x2, 0x7ff, &(0x7f0000000440)=""/249) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 3m32.185203659s ago: executing program 6 (id=167): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x6f, 0x5, 0x0, 0x5c35, 0x8], [0x0, 0x80000000, 0x71, 0xece000, 0x0, 0x3], [0xfa, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffeff]], '\x00', [{0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {}, {0x9}, {}, {}, {0x0, 0x161}, {}, {}, {}, {}, {0x0, 0x10}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='is#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m16.435540388s ago: executing program 37 (id=167): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x6f, 0x5, 0x0, 0x5c35, 0x8], [0x0, 0x80000000, 0x71, 0xece000, 0x0, 0x3], [0xfa, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffeff]], '\x00', [{0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {}, {0x9}, {}, {}, {0x0, 0x161}, {}, {}, {}, {}, {0x0, 0x10}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='is#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m28.987195205s ago: executing program 2 (id=251): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='minix\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r6 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.918330962s ago: executing program 2 (id=254): r0 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, &(0x7f0000000040)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r3 = syz_open_pts(r1, 0x80) utime(0x0, 0x0) dup3(r3, r1, 0x80000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x92}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0xc0, 0x5, 0x4, "ce1f82a7"}, &(0x7f0000000540)}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmmsg(r4, &(0x7f0000000640), 0x0, 0x40008d4) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) 1m20.168794773s ago: executing program 2 (id=256): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000004ca80)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, 0x0, 0x844) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 1m15.221226761s ago: executing program 2 (id=259): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x84, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480), 0xb7) 1m14.73714954s ago: executing program 2 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xea}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 1m11.501220712s ago: executing program 2 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0xa, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d000d606712e9000d2f8db0049d", 0x1d}, {&(0x7f0000000240)="24f8", 0x2}], 0x2) statx(r3, 0x0, 0x1000, 0x10, &(0x7f0000000340)) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) socket$netlink(0x10, 0x3, 0x0) 55.873784642s ago: executing program 38 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0xa, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d000d606712e9000d2f8db0049d", 0x1d}, {&(0x7f0000000240)="24f8", 0x2}], 0x2) statx(r3, 0x0, 0x1000, 0x10, &(0x7f0000000340)) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) socket$netlink(0x10, 0x3, 0x0) 24.893160049s ago: executing program 8 (id=320): r0 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 24.524642788s ago: executing program 9 (id=321): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r0 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 22.900514321s ago: executing program 7 (id=322): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1e}, 0x0, 0x40010000, 0x1}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22.782511477s ago: executing program 8 (id=323): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x44040) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) io_uring_enter(r0, 0x4f63, 0xffa4, 0x11, &(0x7f00000002c0)={[0x5]}, 0x8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 19.952387036s ago: executing program 9 (id=325): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 19.692526734s ago: executing program 7 (id=327): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000400)=""/59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtfilter={0x2110, 0x2c, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x8, 0xa}, {0xfff3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_route={{0xa}, {0x2080, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x9, 0xdb, 0x7, 0x6, 0x4, 0xf5, 0xfffffff7, 0xc3b5, 0x6, 0x80000001, 0x4, 0xfffffffe, 0x6, 0x5, 0x9, 0x6, 0x0, 0xa770, 0x4, 0x2, 0x9, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x0, 0x8, 0xc4, 0x1, 0x2, 0x1, 0x1ff, 0x3ff, 0x101, 0x0, 0x3, 0x10, 0x8, 0x3, 0x3, 0x8, 0x1, 0x4, 0x800, 0x5, 0x4, 0x0, 0x200000, 0x4, 0xf47, 0x0, 0x6cc2912e, 0x6, 0x4, 0x4, 0x7, 0x4, 0x8, 0xe, 0x7, 0x6, 0x9, 0xb3e, 0x7, 0x6, 0x7, 0x2, 0x80, 0x0, 0x5dc, 0x6, 0x1, 0x2, 0x9, 0x4, 0x401, 0xfffffffc, 0x401, 0x3, 0x80, 0x5, 0xfffffffe, 0x3, 0x3, 0x40, 0x3, 0xfffffffc, 0x930, 0x6b2, 0x3, 0x80, 0x0, 0x3, 0x343, 0xffffffff, 0x7, 0x6d, 0x7, 0x7, 0xf4, 0x1641, 0x7, 0x1000, 0x1000, 0x5, 0x400, 0x7ff, 0xff, 0x9, 0xfffffff1, 0xffffffff, 0x5, 0x6, 0xfffffff7, 0x7f, 0x8, 0x200, 0x6, 0x2, 0x975, 0x80, 0x3, 0x4, 0x100, 0x6, 0x2, 0x1, 0x1000, 0x4, 0x3, 0x9131, 0x9, 0x6b7, 0x9, 0x80000000, 0x8, 0xd, 0x1, 0x100, 0xff, 0x1, 0x3ff, 0x6, 0x8, 0x7ff, 0x4, 0x388df126, 0x8001, 0x2, 0x81, 0x2, 0x2, 0x0, 0x7, 0x5, 0x7, 0xe8, 0x6, 0x7, 0x5, 0x43, 0x0, 0x65, 0x3, 0x4, 0xff, 0x0, 0x0, 0x1ff, 0xb, 0x98de, 0x9, 0x4, 0x10000, 0xc221, 0x8, 0x2, 0xfff, 0x8, 0x7, 0x4, 0xe, 0x3f, 0x53a91556, 0x5, 0x8001, 0x1, 0x400, 0x7, 0x7, 0xffffffff, 0x0, 0xe, 0x3, 0x800, 0xfffffffb, 0x5, 0x5, 0x1, 0x6, 0x1, 0x0, 0x0, 0x3, 0x5, 0x3, 0x3, 0x1, 0x9, 0xf39, 0x21, 0x7ff, 0x2, 0x6, 0x3029, 0x80000, 0x8, 0x8, 0x7, 0x1, 0x81, 0xb, 0x4, 0x3, 0x180, 0x5, 0x7, 0x2, 0x40, 0x0, 0x1, 0x10f939ee, 0x80, 0x4, 0x23d, 0x5, 0x8, 0xffffffff, 0x80000001, 0x1f, 0x1, 0x0, 0x5, 0x2, 0x81, 0xd, 0x3, 0xffff, 0x8, 0x7, 0x7, 0xd, 0x6, 0x19ac]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x6, 0x8001, 0x86c, 0x10000, 0x6, 0xd6f7, 0x754, 0x101, 0x1ff, 0xe, 0x3, 0x3, 0x7fff, 0x5, 0xe, 0x20, 0x3, 0x7fffffff, 0x65, 0x4, 0x6, 0xbaaf, 0x4bd, 0x5, 0x81, 0x3, 0x5, 0x4, 0x2, 0x2, 0x3, 0xd7, 0x9, 0x5, 0x2, 0x8, 0x6, 0x0, 0x1ff, 0x400, 0xe9f8, 0x7, 0x2f920e94, 0x6d, 0xfffffc01, 0x9, 0x8, 0x101, 0x0, 0x4, 0x80000001, 0x2, 0x2, 0x3, 0x7, 0x7, 0x9, 0x5, 0xfffffffd, 0x80, 0x3, 0x4, 0xffff0001, 0x5353c9f3, 0x9, 0x3d5, 0x5, 0x2ce, 0xfffffffa, 0x2, 0xfffff784, 0x80, 0x81, 0x7, 0x5b, 0x80000001, 0xff, 0x9, 0x2, 0x7, 0x0, 0x7ff, 0x163, 0x2, 0x518a, 0x9, 0x7, 0x4, 0x7, 0x7, 0x200000, 0x0, 0x7, 0x2, 0x5, 0xffffffff, 0x2, 0x7, 0x8000, 0x10001, 0x10, 0x787, 0x5, 0x9, 0x79a, 0xe6, 0x6, 0x4, 0x1, 0x2, 0x5, 0x9, 0x5, 0x800, 0x40000004, 0x3, 0x2, 0x9, 0x8, 0x80, 0x0, 0x9, 0x200008, 0x56, 0x10, 0xfffff366, 0x200, 0x7, 0x0, 0x2, 0xf, 0x6, 0x80000001, 0xbf0, 0x1c0, 0xb428, 0x4, 0x4, 0x3, 0xb5, 0x7fff, 0x40, 0x7b0, 0xfccb, 0x3, 0x8, 0xfffffff8, 0x7, 0x1, 0x8, 0x36510efa, 0x9, 0xf60e, 0x10, 0x6, 0xfa40, 0x0, 0x0, 0x2, 0x401, 0x4, 0xc51, 0x7f4, 0x7fffffff, 0xe, 0x379, 0x3, 0x2, 0x4, 0x69b, 0xff, 0x7, 0x3403a6b3, 0xd, 0x5, 0x5, 0xf, 0x9, 0x10, 0xa6, 0xd3a, 0x5, 0xfffffffc, 0x1000, 0x8935, 0x400, 0x3, 0x7fffffff, 0x6, 0x3, 0x4, 0x7, 0x0, 0xad17, 0x84, 0x6, 0xefa, 0x3c0c, 0x8, 0xfff, 0x1, 0x4d3, 0x6, 0x45, 0x8, 0xffffff75, 0x401, 0x8, 0x3, 0x2785, 0x81, 0x100, 0x0, 0x8, 0x7ff, 0x2, 0x3008c380, 0x621, 0x0, 0x8, 0x0, 0x800, 0x9, 0x10000000, 0x469d, 0x3, 0x26, 0xf0325f22, 0x9774, 0x800, 0x1, 0x0, 0x0, 0x2, 0x2, 0x2, 0x2, 0x3, 0x2, 0x95cf, 0x1, 0x10000, 0x9, 0x5, 0x8000, 0x10000, 0x3, 0xffffffff, 0xff, 0x7, 0xff, 0x7f, 0x5, 0x3, 0xf7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x5, 0x1, 0xc, {0x3, 0x1, 0x2ce0, 0x9, 0xfff, 0x62}, {0x2, 0x1, 0x3ff, 0x1, 0x1, 0x1}, 0xfffffffa, 0x7, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xd6a, 0xfffffff7, 0x1, 0xb, 0x9, 0x4, 0x0, 0x4, 0x3, 0x3, 0x583, 0x7, 0x1, 0x4, 0xff, 0x101, 0x6, 0x9, 0xc, 0x94, 0x4, 0x4, 0x530, 0x0, 0x2, 0x6, 0x8, 0x4, 0x7, 0x6, 0x1, 0x38000000, 0x80, 0x80000000, 0x6, 0x9, 0x6, 0x9, 0x9, 0xffffffc0, 0x5, 0x8, 0x24e0, 0x8, 0x586, 0x1, 0x6, 0x4a05, 0xac891c5, 0x9654, 0x0, 0x119, 0x3, 0x13d70000, 0x101, 0x75, 0x9, 0x9, 0x5, 0x0, 0x1, 0x6, 0x3147, 0xa, 0x3, 0x0, 0xfffffffc, 0xf, 0x7, 0x7, 0x2ef, 0x0, 0x6, 0x101, 0x5, 0xfffffffd, 0x7fffffff, 0x5, 0x9, 0x800, 0x7, 0x2d4, 0x7, 0xfffffff6, 0xb, 0x9, 0x5, 0xffff0001, 0x8, 0x2b, 0x1, 0x8, 0x37e, 0x3, 0x4, 0x1, 0x0, 0x2, 0x5, 0x400, 0x2, 0xfffffff9, 0x40000000, 0x7, 0x1, 0x2, 0xd, 0x6, 0x920, 0x37, 0x0, 0xc, 0x7fffffff, 0x8, 0x7, 0x0, 0x9, 0x3ff, 0x0, 0x356, 0x44170787, 0xfffffffd, 0x7fff, 0x9, 0x200, 0xf6e, 0x9, 0x10, 0x8, 0x8, 0x7, 0x8, 0x8, 0x3, 0x1, 0x7a, 0x5, 0xbc6, 0x33c8, 0xfffffff7, 0x5, 0xb8, 0x7fffffff, 0x1, 0x80, 0x4, 0xb8, 0x81, 0x5, 0x200, 0x8, 0xdb140000, 0x7, 0x800, 0x4, 0x8, 0x71, 0x6, 0x1ea, 0x1, 0x9, 0x2, 0x7, 0x1, 0x1ff, 0x696, 0x3, 0x103, 0x6, 0x40000, 0x2, 0x0, 0xffffffff, 0x1, 0x0, 0x8, 0x80000000, 0x3, 0x100, 0x73d, 0x0, 0x4, 0x6, 0x72e5, 0x0, 0x6, 0x81, 0x9, 0x2, 0x8e27, 0x400, 0x3, 0x0, 0xc, 0x95160000, 0xb59, 0x19c, 0x8, 0x0, 0x0, 0xe, 0x1, 0x6, 0x8, 0x2, 0x3ff, 0x70, 0x2, 0x1, 0xffffffff, 0x10001, 0x1, 0x5, 0x20000000, 0x9, 0x756d, 0x81, 0x80, 0x5, 0x3, 0x0, 0x1, 0x1, 0x2, 0x400, 0x3, 0x5, 0xe99, 0x1, 0x3ff, 0x5, 0x8, 0x6, 0x0, 0x5, 0x400, 0xfd, 0x48e, 0x7, 0xffffb91a, 0x2, 0x7, 0x10, 0xffffffff, 0xff, 0x9, 0x9, 0x9, 0x4, 0x80, 0x4, 0x4, 0x0, 0x394, 0x4, 0x48d5]}]}, @TCA_ROUTE4_ACT={0x1394, 0x6, [@m_mirred={0x70, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4c7, 0x400, 0xffffffffffffffff, 0xfffffffe, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x1, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xc8, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0x99, 0x6, "870d58fcc05412f1d03bbd0b79494f9f1b79b9c3d04dd2f81b2f72bbd159195681c0bb805e3a091bb8c2b06f29ecf83b85dec51c40119e743824a3a5484bfa4491ac89a7fa506070a488ea9b12d34312cdcd41122f48281a68435b38c9c313aedabc4ed431edbdeb1290d5d195cc45dd33cf92e80881cf5d8c995384b09458661ea4e2116e23a37901052b3614b52498e7c4b1d0ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x1070, 0xb, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x7, 0x6, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf42}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xb, 0x7, 0x3, 0x9}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1e8, 0x1f, 0x0, 0x0, {{0x7}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4e, 0x6, {0xf, 'security\x00', 0x5, 0x401, "03f4168dc6bd8197bfe1a4c4154e836a2904b14a6953a6c7517a4fb91c093278a19c7fe9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xe1}, @TCA_IPT_TARG={0x90, 0x6, {0x2, 'mangle\x00', 0x3, 0xff8a, "d9d4dcdc978642505d72663bc24e78fe19552066495ac4a8e9239bf3e406a4d0b1cc656de3997a046cc08177c69fc8bba9ff3a35978ec8e814a0141e5c4250bee352f0a1d23c87000757ccc1198a12d719c27176201a61a24af79f6c1ab017e30bff3af1eb22"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_TARG={0x7b, 0x6, {0x7, 'mangle\x00', 0x3, 0x0, "f6fd3ce01811fa535ea9c34db6a84452d551cca69b085a822dd9af8c3b405b3dedee085d8a885fe98445d1a4759e2417bd00c5bfc9c4d8361b0bf0a5eb65e29692867a040ca89f0b91f54bd930d06e9449"}}, @TCA_IPT_TARG={0x3b, 0x6, {0x10, 'filter\x00', 0xff, 0x7fff, "7114c1eaae851cdf15648bfadce9c5da3b"}}]}, {0x6, 0x6, 'Ly'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x88, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x81, 0x101, 0x2, {0x0, 0x0, 0x9, 0x2, 0x4, 0x6}, {0x1d, 0x2, 0x4, 0x7, 0x68a1, 0x3}, 0x4, 0x2, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x81, 0x2, 0x500, {0x1, 0x2, 0x40, 0x1, 0x95fb, 0x485}, {0xa, 0x2, 0x12d, 0x8, 0x7, 0x8e8}, 0x4, 0xa94, 0x4}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x20, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_MATCHALL_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x81}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xcec}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x2110}, 0x1, 0x0, 0x0, 0x804}, 0x4004881) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 18.69009772s ago: executing program 9 (id=329): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 16.727242182s ago: executing program 7 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) geteuid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x4, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r7, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 16.112941663s ago: executing program 8 (id=331): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x17, 0x4, "b3aa98ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 14.579583937s ago: executing program 7 (id=333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 14.125801631s ago: executing program 9 (id=334): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r0 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 12.800029063s ago: executing program 5 (id=335): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 10.680707818s ago: executing program 7 (id=336): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1e}, 0x0, 0x40010000, 0x1}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.625547588s ago: executing program 8 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x5, 0x0, 0x0, @msi={0x3, 0x40, 0x5ed5e3c, 0x4e32cf73}}]}) 10.26973069s ago: executing program 9 (id=338): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 10.03925695s ago: executing program 5 (id=339): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000400)=""/59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtfilter={0x2110, 0x2c, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x8, 0xa}, {0xfff3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_route={{0xa}, {0x2080, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x9, 0xdb, 0x7, 0x6, 0x4, 0xf5, 0xfffffff7, 0xc3b5, 0x6, 0x80000001, 0x4, 0xfffffffe, 0x6, 0x5, 0x9, 0x6, 0x0, 0xa770, 0x4, 0x2, 0x9, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x0, 0x8, 0xc4, 0x1, 0x2, 0x1, 0x1ff, 0x3ff, 0x101, 0x0, 0x3, 0x10, 0x8, 0x3, 0x3, 0x8, 0x1, 0x4, 0x800, 0x5, 0x4, 0x0, 0x200000, 0x4, 0xf47, 0x0, 0x6cc2912e, 0x6, 0x4, 0x4, 0x7, 0x4, 0x8, 0xe, 0x7, 0x6, 0x9, 0xb3e, 0x7, 0x6, 0x7, 0x2, 0x80, 0x0, 0x5dc, 0x6, 0x1, 0x2, 0x9, 0x4, 0x401, 0xfffffffc, 0x401, 0x3, 0x80, 0x5, 0xfffffffe, 0x3, 0x3, 0x40, 0x3, 0xfffffffc, 0x930, 0x6b2, 0x3, 0x80, 0x0, 0x3, 0x343, 0xffffffff, 0x7, 0x6d, 0x7, 0x7, 0xf4, 0x1641, 0x7, 0x1000, 0x1000, 0x5, 0x400, 0x7ff, 0xff, 0x9, 0xfffffff1, 0xffffffff, 0x5, 0x6, 0xfffffff7, 0x7f, 0x8, 0x200, 0x6, 0x2, 0x975, 0x80, 0x3, 0x4, 0x100, 0x6, 0x2, 0x1, 0x1000, 0x4, 0x3, 0x9131, 0x9, 0x6b7, 0x9, 0x80000000, 0x8, 0xd, 0x1, 0x100, 0xff, 0x1, 0x3ff, 0x6, 0x8, 0x7ff, 0x4, 0x388df126, 0x8001, 0x2, 0x81, 0x2, 0x2, 0x0, 0x7, 0x5, 0x7, 0xe8, 0x6, 0x7, 0x5, 0x43, 0x0, 0x65, 0x3, 0x4, 0xff, 0x0, 0x0, 0x1ff, 0xb, 0x98de, 0x9, 0x4, 0x10000, 0xc221, 0x8, 0x2, 0xfff, 0x8, 0x7, 0x4, 0xe, 0x3f, 0x53a91556, 0x5, 0x8001, 0x1, 0x400, 0x7, 0x7, 0xffffffff, 0x0, 0xe, 0x3, 0x800, 0xfffffffb, 0x5, 0x5, 0x1, 0x6, 0x1, 0x0, 0x0, 0x3, 0x5, 0x3, 0x3, 0x1, 0x9, 0xf39, 0x21, 0x7ff, 0x2, 0x6, 0x3029, 0x80000, 0x8, 0x8, 0x7, 0x1, 0x81, 0xb, 0x4, 0x3, 0x180, 0x5, 0x7, 0x2, 0x40, 0x0, 0x1, 0x10f939ee, 0x80, 0x4, 0x23d, 0x5, 0x8, 0xffffffff, 0x80000001, 0x1f, 0x1, 0x0, 0x5, 0x2, 0x81, 0xd, 0x3, 0xffff, 0x8, 0x7, 0x7, 0xd, 0x6, 0x19ac]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x6, 0x8001, 0x86c, 0x10000, 0x6, 0xd6f7, 0x754, 0x101, 0x1ff, 0xe, 0x3, 0x3, 0x7fff, 0x5, 0xe, 0x20, 0x3, 0x7fffffff, 0x65, 0x4, 0x6, 0xbaaf, 0x4bd, 0x5, 0x81, 0x3, 0x5, 0x4, 0x2, 0x2, 0x3, 0xd7, 0x9, 0x5, 0x2, 0x8, 0x6, 0x0, 0x1ff, 0x400, 0xe9f8, 0x7, 0x2f920e94, 0x6d, 0xfffffc01, 0x9, 0x8, 0x101, 0x0, 0x4, 0x80000001, 0x2, 0x2, 0x3, 0x7, 0x7, 0x9, 0x5, 0xfffffffd, 0x80, 0x3, 0x4, 0xffff0001, 0x5353c9f3, 0x9, 0x3d5, 0x5, 0x2ce, 0xfffffffa, 0x2, 0xfffff784, 0x80, 0x81, 0x7, 0x5b, 0x80000001, 0xff, 0x9, 0x2, 0x7, 0x0, 0x7ff, 0x163, 0x2, 0x518a, 0x9, 0x7, 0x4, 0x7, 0x7, 0x200000, 0x0, 0x7, 0x2, 0x5, 0xffffffff, 0x2, 0x7, 0x8000, 0x10001, 0x10, 0x787, 0x5, 0x9, 0x79a, 0xe6, 0x6, 0x4, 0x1, 0x2, 0x5, 0x9, 0x5, 0x800, 0x40000004, 0x3, 0x2, 0x9, 0x8, 0x80, 0x0, 0x9, 0x200008, 0x56, 0x10, 0xfffff366, 0x200, 0x7, 0x0, 0x2, 0xf, 0x6, 0x80000001, 0xbf0, 0x1c0, 0xb428, 0x4, 0x4, 0x3, 0xb5, 0x7fff, 0x40, 0x7b0, 0xfccb, 0x3, 0x8, 0xfffffff8, 0x7, 0x1, 0x8, 0x36510efa, 0x9, 0xf60e, 0x10, 0x6, 0xfa40, 0x0, 0x0, 0x2, 0x401, 0x4, 0xc51, 0x7f4, 0x7fffffff, 0xe, 0x379, 0x3, 0x2, 0x4, 0x69b, 0xff, 0x7, 0x3403a6b3, 0xd, 0x5, 0x5, 0xf, 0x9, 0x10, 0xa6, 0xd3a, 0x5, 0xfffffffc, 0x1000, 0x8935, 0x400, 0x3, 0x7fffffff, 0x6, 0x3, 0x4, 0x7, 0x0, 0xad17, 0x84, 0x6, 0xefa, 0x3c0c, 0x8, 0xfff, 0x1, 0x4d3, 0x6, 0x45, 0x8, 0xffffff75, 0x401, 0x8, 0x3, 0x2785, 0x81, 0x100, 0x0, 0x8, 0x7ff, 0x2, 0x3008c380, 0x621, 0x0, 0x8, 0x0, 0x800, 0x9, 0x10000000, 0x469d, 0x3, 0x26, 0xf0325f22, 0x9774, 0x800, 0x1, 0x0, 0x0, 0x2, 0x2, 0x2, 0x2, 0x3, 0x2, 0x95cf, 0x1, 0x10000, 0x9, 0x5, 0x8000, 0x10000, 0x3, 0xffffffff, 0xff, 0x7, 0xff, 0x7f, 0x5, 0x3, 0xf7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x5, 0x1, 0xc, {0x3, 0x1, 0x2ce0, 0x9, 0xfff, 0x62}, {0x2, 0x1, 0x3ff, 0x1, 0x1, 0x1}, 0xfffffffa, 0x7, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xd6a, 0xfffffff7, 0x1, 0xb, 0x9, 0x4, 0x0, 0x4, 0x3, 0x3, 0x583, 0x7, 0x1, 0x4, 0xff, 0x101, 0x6, 0x9, 0xc, 0x94, 0x4, 0x4, 0x530, 0x0, 0x2, 0x6, 0x8, 0x4, 0x7, 0x6, 0x1, 0x38000000, 0x80, 0x80000000, 0x6, 0x9, 0x6, 0x9, 0x9, 0xffffffc0, 0x5, 0x8, 0x24e0, 0x8, 0x586, 0x1, 0x6, 0x4a05, 0xac891c5, 0x9654, 0x0, 0x119, 0x3, 0x13d70000, 0x101, 0x75, 0x9, 0x9, 0x5, 0x0, 0x1, 0x6, 0x3147, 0xa, 0x3, 0x0, 0xfffffffc, 0xf, 0x7, 0x7, 0x2ef, 0x0, 0x6, 0x101, 0x5, 0xfffffffd, 0x7fffffff, 0x5, 0x9, 0x800, 0x7, 0x2d4, 0x7, 0xfffffff6, 0xb, 0x9, 0x5, 0xffff0001, 0x8, 0x2b, 0x1, 0x8, 0x37e, 0x3, 0x4, 0x1, 0x0, 0x2, 0x5, 0x400, 0x2, 0xfffffff9, 0x40000000, 0x7, 0x1, 0x2, 0xd, 0x6, 0x920, 0x37, 0x0, 0xc, 0x7fffffff, 0x8, 0x7, 0x0, 0x9, 0x3ff, 0x0, 0x356, 0x44170787, 0xfffffffd, 0x7fff, 0x9, 0x200, 0xf6e, 0x9, 0x10, 0x8, 0x8, 0x7, 0x8, 0x8, 0x3, 0x1, 0x7a, 0x5, 0xbc6, 0x33c8, 0xfffffff7, 0x5, 0xb8, 0x7fffffff, 0x1, 0x80, 0x4, 0xb8, 0x81, 0x5, 0x200, 0x8, 0xdb140000, 0x7, 0x800, 0x4, 0x8, 0x71, 0x6, 0x1ea, 0x1, 0x9, 0x2, 0x7, 0x1, 0x1ff, 0x696, 0x3, 0x103, 0x6, 0x40000, 0x2, 0x0, 0xffffffff, 0x1, 0x0, 0x8, 0x80000000, 0x3, 0x100, 0x73d, 0x0, 0x4, 0x6, 0x72e5, 0x0, 0x6, 0x81, 0x9, 0x2, 0x8e27, 0x400, 0x3, 0x0, 0xc, 0x95160000, 0xb59, 0x19c, 0x8, 0x0, 0x0, 0xe, 0x1, 0x6, 0x8, 0x2, 0x3ff, 0x70, 0x2, 0x1, 0xffffffff, 0x10001, 0x1, 0x5, 0x20000000, 0x9, 0x756d, 0x81, 0x80, 0x5, 0x3, 0x0, 0x1, 0x1, 0x2, 0x400, 0x3, 0x5, 0xe99, 0x1, 0x3ff, 0x5, 0x8, 0x6, 0x0, 0x5, 0x400, 0xfd, 0x48e, 0x7, 0xffffb91a, 0x2, 0x7, 0x10, 0xffffffff, 0xff, 0x9, 0x9, 0x9, 0x4, 0x80, 0x4, 0x4, 0x0, 0x394, 0x4, 0x48d5]}]}, @TCA_ROUTE4_ACT={0x1394, 0x6, [@m_mirred={0x70, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4c7, 0x400, 0xffffffffffffffff, 0xfffffffe, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x1, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xc8, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0x99, 0x6, "870d58fcc05412f1d03bbd0b79494f9f1b79b9c3d04dd2f81b2f72bbd159195681c0bb805e3a091bb8c2b06f29ecf83b85dec51c40119e743824a3a5484bfa4491ac89a7fa506070a488ea9b12d34312cdcd41122f48281a68435b38c9c313aedabc4ed431edbdeb1290d5d195cc45dd33cf92e80881cf5d8c995384b09458661ea4e2116e23a37901052b3614b52498e7c4b1d0ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x1070, 0xb, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x7, 0x6, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf42}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xb, 0x7, 0x3, 0x9}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1e8, 0x1f, 0x0, 0x0, {{0x7}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4e, 0x6, {0xf, 'security\x00', 0x5, 0x401, "03f4168dc6bd8197bfe1a4c4154e836a2904b14a6953a6c7517a4fb91c093278a19c7fe9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xe1}, @TCA_IPT_TARG={0x90, 0x6, {0x2, 'mangle\x00', 0x3, 0xff8a, "d9d4dcdc978642505d72663bc24e78fe19552066495ac4a8e9239bf3e406a4d0b1cc656de3997a046cc08177c69fc8bba9ff3a35978ec8e814a0141e5c4250bee352f0a1d23c87000757ccc1198a12d719c27176201a61a24af79f6c1ab017e30bff3af1eb22"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_TARG={0x7b, 0x6, {0x7, 'mangle\x00', 0x3, 0x0, "f6fd3ce01811fa535ea9c34db6a84452d551cca69b085a822dd9af8c3b405b3dedee085d8a885fe98445d1a4759e2417bd00c5bfc9c4d8361b0bf0a5eb65e29692867a040ca89f0b91f54bd930d06e9449"}}, @TCA_IPT_TARG={0x3b, 0x6, {0x10, 'filter\x00', 0xff, 0x7fff, "7114c1eaae851cdf15648bfadce9c5da3b"}}]}, {0x6, 0x6, 'Ly'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x88, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x81, 0x101, 0x2, {0x0, 0x0, 0x9, 0x2, 0x4, 0x6}, {0x1d, 0x2, 0x4, 0x7, 0x68a1, 0x3}, 0x4, 0x2, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x81, 0x2, 0x500, {0x1, 0x2, 0x40, 0x1, 0x95fb, 0x485}, {0xa, 0x2, 0x12d, 0x8, 0x7, 0x8e8}, 0x4, 0xa94, 0x4}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x20, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_MATCHALL_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x81}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xcec}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x2110}, 0x1, 0x0, 0x0, 0x804}, 0x4004881) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 9.057878878s ago: executing program 9 (id=340): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x44040) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) io_uring_enter(r0, 0x4f63, 0xffa4, 0x11, &(0x7f00000002c0)={[0x5]}, 0x8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b\x00']) 7.321753909s ago: executing program 5 (id=341): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) socket$nl_route(0x10, 0x3, 0x0) 4.742955623s ago: executing program 5 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) geteuid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x4, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r7, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 4.6053385s ago: executing program 8 (id=343): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 2.200710862s ago: executing program 5 (id=344): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x2, 0x0, 0x8) 1.947999422s ago: executing program 7 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000300)=0x808c) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 336.187699ms ago: executing program 5 (id=346): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x17, 0x4, "b3aa98ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 0s ago: executing program 8 (id=347): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r0 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4000, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) kernel console output (not intermixed with test programs): 0: Adding interface: batadv_slave_0 [ 287.366654][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.398384][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.493748][ T5785] Bluetooth: hci3: command tx timeout [ 287.529904][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.538732][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.580929][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.967111][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 288.501460][ T5994] bridge_slave_1: left allmulticast mode [ 288.507816][ T5994] bridge_slave_1: left promiscuous mode [ 288.516615][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.986879][ T5994] bridge_slave_0: left allmulticast mode [ 288.993818][ T5994] bridge_slave_0: left promiscuous mode [ 289.000630][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.549244][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.600985][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.617516][ T5994] bond0 (unregistering): Released all slaves [ 289.884133][ T6355] hsr_slave_0: entered promiscuous mode [ 289.896072][ T6355] hsr_slave_1: entered promiscuous mode [ 289.906090][ T6355] debugfs: 'hsr0' already exists in 'hsr' [ 289.911978][ T6355] Cannot create hsr debugfs directory [ 290.014085][ T6151] veth0_macvtap: entered promiscuous mode [ 290.112030][ T5994] hsr_slave_0: left promiscuous mode [ 290.120575][ T5994] hsr_slave_1: left promiscuous mode [ 290.133517][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.141367][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.159216][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.171406][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.205594][ T5994] veth1_macvtap: left promiscuous mode [ 290.211304][ T5994] veth0_macvtap: left promiscuous mode [ 290.226434][ T5994] veth1_vlan: left promiscuous mode [ 290.231957][ T5994] veth0_vlan: left promiscuous mode [ 290.938464][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 290.959199][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 291.587813][ T6151] veth1_macvtap: entered promiscuous mode [ 291.824182][ T6145] veth0_macvtap: entered promiscuous mode [ 292.143723][ T6145] veth1_macvtap: entered promiscuous mode [ 292.252527][ T5431] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 292.467359][ T5431] usb 5-1: Using ep0 maxpacket: 8 [ 292.519463][ T5431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.539583][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.554514][ T5431] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.582548][ T5431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 292.612448][ T5431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 292.655602][ T5431] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 292.687613][ T5431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.703598][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.730900][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.749533][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.762624][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.776406][ T5431] hub 5-1:1.0: bad descriptor, ignoring hub [ 292.777506][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.793657][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.801293][ T5431] hub 5-1:1.0: probe with driver hub failed with error -5 [ 292.885426][ T5431] cdc_wdm 5-1:1.0: skipping garbage [ 292.928982][ T5431] cdc_wdm 5-1:1.0: skipping garbage [ 293.007910][ T5431] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 293.043678][ T5431] cdc_wdm 5-1:1.0: Unknown control protocol [ 293.115114][ T5431] usb 5-1: USB disconnect, device number 8 [ 293.153183][ T1151] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.202845][ T1151] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.211835][ T1151] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.337592][ T1151] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.494345][ T6342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.552680][ T5431] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 293.586112][ T6342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.760554][ T5431] usb 5-1: Using ep0 maxpacket: 8 [ 293.799159][ T6342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.812522][ T5431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.853701][ T5431] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 293.896225][ T5431] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.952691][ T5431] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 293.962064][ T5431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.108414][ T6342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.116265][ T5431] hub 5-1:1.0: bad descriptor, ignoring hub [ 294.152604][ T5431] hub 5-1:1.0: probe with driver hub failed with error -5 [ 294.194126][ T5431] cdc_wdm 5-1:1.0: skipping garbage [ 294.199551][ T5431] cdc_wdm 5-1:1.0: skipping garbage [ 294.252700][ T5431] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 294.315913][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.326963][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.335565][ T5431] usb 5-1: USB disconnect, device number 9 [ 294.343738][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.361583][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.382076][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.851483][ T5787] Bluetooth: hci5: command tx timeout [ 296.442818][ T5787] Bluetooth: hci6: command tx timeout [ 296.671747][ T6433] chnl_net:caif_netlink_parms(): no params data found [ 296.758700][ T6355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.825931][ T6355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.926359][ T5787] Bluetooth: hci5: command tx timeout [ 296.964367][ T6355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.952579][ T6355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.418476][ T6474] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 298.433700][ T6476] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 298.448457][ T12] bridge_slave_1: left allmulticast mode [ 298.462846][ T12] bridge_slave_1: left promiscuous mode [ 298.469568][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.488710][ T12] bridge_slave_0: left allmulticast mode [ 298.496093][ T12] bridge_slave_0: left promiscuous mode [ 298.509515][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.522815][ T5787] Bluetooth: hci6: command tx timeout [ 298.844477][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.861717][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.882022][ T12] bond0 (unregistering): Released all slaves [ 299.004042][ T5787] Bluetooth: hci5: command tx timeout [ 299.240311][ T12] hsr_slave_0: left promiscuous mode [ 299.276593][ T12] hsr_slave_1: left promiscuous mode [ 299.292171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.311009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.366933][ T12] veth1_macvtap: left promiscuous mode [ 300.340462][ T12] veth0_macvtap: left promiscuous mode [ 300.346523][ T12] veth1_vlan: left promiscuous mode [ 300.352068][ T12] veth0_vlan: left promiscuous mode [ 301.438308][ T5785] Bluetooth: hci5: command tx timeout [ 301.438301][ T5787] Bluetooth: hci6: command tx timeout [ 306.482679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 306.852971][ T5785] Bluetooth: hci6: command tx timeout [ 308.398824][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.434379][ T12] team0 (unregistering): Port device team_slave_0 removed [ 309.138810][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.150545][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.160800][ T6433] bridge_slave_0: entered allmulticast mode [ 309.171024][ T6433] bridge_slave_0: entered promiscuous mode [ 309.230781][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.239706][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.252155][ T6433] bridge_slave_1: entered allmulticast mode [ 309.268858][ T6433] bridge_slave_1: entered promiscuous mode [ 309.346791][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 309.466334][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.580385][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.619765][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.923300][ T6433] team0: Port device team_slave_0 added [ 309.970773][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.046555][ T6433] team0: Port device team_slave_1 added [ 310.258140][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.390533][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.499189][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.620121][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.630258][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.696582][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.735926][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.792450][ T5834] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 310.879425][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.888067][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.914831][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.950811][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.963062][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 310.973905][ T5834] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 310.974281][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.984263][ T5834] usb 5-1: config 0 has no interface number 0 [ 310.992018][ T6444] bridge_slave_0: entered allmulticast mode [ 311.000813][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.016442][ T6444] bridge_slave_0: entered promiscuous mode [ 311.052545][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 311.068886][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.076465][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.082632][ T5834] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.112650][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.141752][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.142530][ T5834] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 311.149300][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.172640][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.212126][ T5834] usb 5-1: config 0 descriptor?? [ 311.214139][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.252690][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.260394][ T6444] bridge_slave_1: entered allmulticast mode [ 311.274001][ T5834] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 311.314683][ T6444] bridge_slave_1: entered promiscuous mode [ 311.479081][ T5834] usb 5-1: USB disconnect, device number 10 [ 311.520387][ T5834] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 311.691640][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.709357][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.797804][ T6433] hsr_slave_0: entered promiscuous mode [ 311.811605][ T6433] hsr_slave_1: entered promiscuous mode [ 311.820648][ T6433] debugfs: 'hsr0' already exists in 'hsr' [ 311.831496][ T6433] Cannot create hsr debugfs directory [ 311.850980][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.261083][ T6444] team0: Port device team_slave_0 added [ 312.270017][ T12] bridge_slave_1: left allmulticast mode [ 312.277247][ T12] bridge_slave_1: left promiscuous mode [ 312.289608][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.311053][ T12] bridge_slave_0: left allmulticast mode [ 312.323137][ T12] bridge_slave_0: left promiscuous mode [ 312.329644][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.801558][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.819246][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.839532][ T12] bond0 (unregistering): Released all slaves [ 313.019376][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.89'. [ 313.036833][ T6444] team0: Port device team_slave_1 added [ 313.160978][ T12] hsr_slave_0: left promiscuous mode [ 313.169671][ T12] hsr_slave_1: left promiscuous mode [ 313.180433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.189178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.210341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.223593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.262391][ T12] veth1_macvtap: left promiscuous mode [ 313.268095][ T12] veth0_macvtap: left promiscuous mode [ 313.276369][ T12] veth1_vlan: left promiscuous mode [ 313.282034][ T12] veth0_vlan: left promiscuous mode [ 314.317648][ T12] team0 (unregistering): Port device team_slave_1 removed [ 314.434660][ T12] team0 (unregistering): Port device team_slave_0 removed [ 314.918837][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.931889][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.963783][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.049270][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.094543][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.119258][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.179850][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.215732][ T6342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.561842][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.569553][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.848017][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.855649][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.114783][ T6444] hsr_slave_0: entered promiscuous mode [ 316.145507][ T6444] hsr_slave_1: entered promiscuous mode [ 316.154503][ T6444] debugfs: 'hsr0' already exists in 'hsr' [ 316.173413][ T6444] Cannot create hsr debugfs directory [ 316.252554][ T6528] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 316.359489][ T6528] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 317.088364][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.271613][ T6433] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.441237][ T6433] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.547679][ T6433] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 317.622483][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 317.669221][ T6433] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 317.819276][ T5834] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 317.846081][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.893806][ T5834] usb 5-1: config 0 has no interface number 0 [ 317.900143][ T5834] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 317.952384][ T5834] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.020392][ T5834] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 318.035861][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.045303][ T5834] usb 5-1: Product: syz [ 318.049651][ T5834] usb 5-1: Manufacturer: syz [ 318.066936][ T5834] usb 5-1: SerialNumber: syz [ 318.084140][ T5834] usb 5-1: config 0 descriptor?? [ 318.300600][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.322581][ T5834] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 318.376605][ T5834] usb 5-1: USB disconnect, device number 11 [ 318.436671][ T6444] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 318.514299][ T6444] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 318.567165][ T6444] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 318.605433][ T6444] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 319.253816][ T6342] veth0_vlan: entered promiscuous mode [ 319.350863][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.496324][ T6342] veth1_vlan: entered promiscuous mode [ 319.681369][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.911815][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.919431][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.942901][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.950454][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.678145][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.728704][ T6342] veth0_macvtap: entered promiscuous mode [ 321.446429][ T6342] veth1_macvtap: entered promiscuous mode [ 321.742600][ T6444] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.985260][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.992633][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.051348][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.198666][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.206236][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.381411][ T6355] veth0_vlan: entered promiscuous mode [ 322.440990][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.583655][ T5989] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.602785][ T5989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.611783][ T5989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.664696][ T5989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.774288][ T6355] veth1_vlan: entered promiscuous mode [ 323.551680][ T6355] veth0_macvtap: entered promiscuous mode [ 323.658546][ T6355] veth1_macvtap: entered promiscuous mode [ 324.055580][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.177152][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.247188][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.419872][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.505537][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.625661][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.666744][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.519509][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.874853][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.894417][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.324048][ T6433] veth0_vlan: entered promiscuous mode [ 327.470687][ T6433] veth1_vlan: entered promiscuous mode [ 327.801486][ T6433] veth0_macvtap: entered promiscuous mode [ 327.975135][ T6433] veth1_macvtap: entered promiscuous mode [ 328.137065][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 328.236531][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.659862][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.930330][ T6444] veth0_vlan: entered promiscuous mode [ 328.987724][ T1151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.144866][ T6444] veth1_vlan: entered promiscuous mode [ 329.274475][ T5993] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.420860][ T5993] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.615785][ T5993] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.319898][ T6444] veth0_macvtap: entered promiscuous mode [ 331.502089][ T6444] veth1_macvtap: entered promiscuous mode [ 331.866821][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.901962][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.107666][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.192371][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.200356][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.279013][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.541542][ T5993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.612604][ T5993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.674665][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.685299][ T6229] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.725260][ T6229] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.742518][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.139678][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.232674][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.970805][ T6744] affs: No valid root block on device nullb0 [ 340.834808][ T6740] Zero length message leads to an empty skb [ 344.902846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 345.702439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 347.442575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 349.185707][ T6784] random: crng reseeded on system resumption [ 351.152103][ T5787] Bluetooth: hci6: command 0x0405 tx timeout [ 352.310644][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.339969][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.217550][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.239543][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.253201][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.267460][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.283019][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.480193][ T6822] affs: No valid root block on device nullb0 [ 358.912686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 359.324733][ T5787] Bluetooth: hci1: command tx timeout [ 361.325295][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.340006][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.354926][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.377139][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.399077][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.406846][ T5785] Bluetooth: hci1: command tx timeout [ 363.342887][ T3080] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 363.484789][ T49] Bluetooth: hci2: command tx timeout [ 363.484836][ T5787] Bluetooth: hci1: command tx timeout [ 363.600969][ T3080] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 363.642610][ T3080] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.712583][ T3080] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.936243][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 364.160953][ T6862] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 364.453772][ T3080] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 364.463715][ T3080] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 364.471912][ T3080] usb 5-1: Manufacturer: syz [ 364.482768][ T3080] usb 5-1: config 0 descriptor?? [ 364.944251][ T6866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.683426][ T49] Bluetooth: hci1: command tx timeout [ 365.689016][ T49] Bluetooth: hci2: command tx timeout [ 365.711560][ T3080] igorplugusb 5-1:0.0: incorrect number of endpoints [ 366.999829][ T3080] usb 5-1: USB disconnect, device number 12 [ 367.413781][ T6878] affs: No valid root block on device nullb0 [ 367.732885][ T5787] Bluetooth: hci2: command tx timeout [ 368.332996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 369.547390][ T5989] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.712791][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 369.804226][ T5787] Bluetooth: hci2: command tx timeout [ 371.677914][ T5989] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.476448][ T5989] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.686806][ T5989] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.172440][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.186569][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.214729][ T6815] bridge_slave_0: entered allmulticast mode [ 373.276398][ T6815] bridge_slave_0: entered promiscuous mode [ 373.872995][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.907908][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.950403][ T6815] bridge_slave_1: entered allmulticast mode [ 373.994972][ T6815] bridge_slave_1: entered promiscuous mode [ 376.112903][ T5831] IPVS: starting estimator thread 0... [ 377.132836][ T6907] IPVS: using max 240 ests per chain, 12000 per kthread [ 377.316937][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.782073][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.911559][ T5989] bridge_slave_1: left allmulticast mode [ 379.112626][ T5989] bridge_slave_1: left promiscuous mode [ 379.253769][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.318039][ T5989] bridge_slave_0: left allmulticast mode [ 380.443894][ T5989] bridge_slave_0: left promiscuous mode [ 380.522083][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.827308][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.982952][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.080436][ T5989] bond0 (unregistering): Released all slaves [ 382.364975][ T6910] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 382.755985][ T6815] team0: Port device team_slave_0 added [ 382.913394][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.926225][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.948750][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.953915][ T5989] hsr_slave_0: left promiscuous mode [ 382.965647][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.987387][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.039436][ T5989] hsr_slave_1: left promiscuous mode [ 383.094318][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.101814][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.201325][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.232496][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.404511][ T5989] veth1_macvtap: left promiscuous mode [ 383.429594][ T5989] veth0_macvtap: left promiscuous mode [ 383.456134][ T5989] veth1_vlan: left promiscuous mode [ 383.481211][ T5989] veth0_vlan: left promiscuous mode [ 385.083896][ T5787] Bluetooth: hci5: command tx timeout [ 386.651448][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 386.754489][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 387.162549][ T5787] Bluetooth: hci5: command tx timeout [ 387.486546][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.496798][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.512836][ T6835] bridge_slave_0: entered allmulticast mode [ 387.539847][ T6835] bridge_slave_0: entered promiscuous mode [ 387.627208][ T6815] team0: Port device team_slave_1 added [ 387.961756][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.003990][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.011639][ T6835] bridge_slave_1: entered allmulticast mode [ 388.025777][ T6835] bridge_slave_1: entered promiscuous mode [ 388.247725][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.272620][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.318260][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.318499][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.019876][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.374532][ T5787] Bluetooth: hci5: command tx timeout [ 389.381210][ T6945] autofs: Unknown parameter 'fd00000000000000000000' [ 390.253593][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.147'. [ 390.278801][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.147'. [ 391.240398][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.296943][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.327838][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.382645][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.412588][ T5787] Bluetooth: hci5: command tx timeout [ 391.537443][ T6945] geneve2: entered promiscuous mode [ 391.580530][ T6945] geneve2: entered allmulticast mode [ 391.710445][ T6929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.734705][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.772478][ T6929] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 391.926749][ T6929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.976270][ T6929] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 392.317935][ T5989] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.398726][ T6835] team0: Port device team_slave_0 added [ 392.440690][ T6835] team0: Port device team_slave_1 added [ 392.657698][ T6815] hsr_slave_0: entered promiscuous mode [ 392.706479][ T6815] hsr_slave_1: entered promiscuous mode [ 392.732977][ T6815] debugfs: 'hsr0' already exists in 'hsr' [ 392.738890][ T6815] Cannot create hsr debugfs directory [ 392.861500][ T5989] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.311933][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.321476][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.382860][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.532934][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.540217][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.574014][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.185778][ T5989] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.524821][ T5989] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.633579][ T6929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 394.639630][ T6929] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 394.746977][ T6929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.831744][ T6929] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 394.925656][ T6929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 394.959852][ T6929] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 395.509394][ T6835] hsr_slave_0: entered promiscuous mode [ 395.566020][ T6835] hsr_slave_1: entered promiscuous mode [ 395.602963][ T6835] debugfs: 'hsr0' already exists in 'hsr' [ 395.608890][ T6835] Cannot create hsr debugfs directory [ 396.382624][ T6958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 396.715765][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 397.358996][ T5989] bridge_slave_1: left allmulticast mode [ 397.372415][ T5989] bridge_slave_1: left promiscuous mode [ 397.393684][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.443691][ T5989] bridge_slave_0: left allmulticast mode [ 397.449452][ T5989] bridge_slave_0: left promiscuous mode [ 397.464551][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.697578][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.755021][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.792840][ T5989] bond0 (unregistering): Released all slaves [ 400.562811][ T5989] hsr_slave_0: left promiscuous mode [ 400.882538][ T5989] hsr_slave_1: left promiscuous mode [ 400.889716][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.925234][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.043836][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.051328][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.173240][ T5989] veth1_macvtap: left promiscuous mode [ 401.183343][ T5989] veth0_macvtap: left promiscuous mode [ 401.197454][ T5989] veth1_vlan: left promiscuous mode [ 401.212572][ T5989] veth0_vlan: left promiscuous mode [ 404.005659][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 405.013078][ T5831] IPVS: starting estimator thread 0... [ 405.024693][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 405.376835][ T6985] IPVS: using max 192 ests per chain, 9600 per kthread [ 406.493169][ T6988] overlayfs: failed to resolve './file0': -2 [ 408.970996][ T6993] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 409.531517][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.539459][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.579554][ T6924] bridge_slave_0: entered allmulticast mode [ 409.607149][ T6924] bridge_slave_0: entered promiscuous mode [ 409.658187][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.695714][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.733119][ T6924] bridge_slave_1: entered allmulticast mode [ 409.752951][ T6924] bridge_slave_1: entered promiscuous mode [ 410.209176][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.303975][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.592079][ T5989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.859654][ T6924] team0: Port device team_slave_0 added [ 411.934131][ T6924] team0: Port device team_slave_1 added [ 412.136280][ T5989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.445564][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.462858][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.580312][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.699428][ T5989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.194602][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.201710][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.272417][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.314921][ T6835] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 413.408898][ T6835] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.772530][ T5989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.858197][ T6835] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 414.127469][ T6835] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 414.505699][ T6924] hsr_slave_0: entered promiscuous mode [ 414.534961][ T6924] hsr_slave_1: entered promiscuous mode [ 414.574480][ T6924] debugfs: 'hsr0' already exists in 'hsr' [ 414.580390][ T6924] Cannot create hsr debugfs directory [ 414.803430][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 414.812603][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 414.827271][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 414.853193][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 414.868120][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.971750][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 414.998962][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.017648][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.050879][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.064194][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.934823][ T5989] bridge_slave_1: left allmulticast mode [ 415.950152][ T5989] bridge_slave_1: left promiscuous mode [ 416.103792][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.203479][ T49] Bluetooth: hci4: command tx timeout [ 418.662940][ T5989] bridge_slave_0: left allmulticast mode [ 418.668709][ T5989] bridge_slave_0: left promiscuous mode [ 418.723705][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.245890][ T49] Bluetooth: hci4: command tx timeout [ 420.138515][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.157013][ T5787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.175835][ T5787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.197998][ T5787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.217233][ T5787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.228182][ T5787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.395338][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.513028][ T5989] bond0 (unregistering): Released all slaves [ 421.323728][ T49] Bluetooth: hci4: command tx timeout [ 422.290024][ T49] Bluetooth: hci6: command tx timeout [ 422.987790][ T5989] hsr_slave_0: left promiscuous mode [ 423.036038][ T5989] hsr_slave_1: left promiscuous mode [ 423.063907][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.071400][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.119720][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.158477][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.267468][ T5989] veth1_macvtap: left promiscuous mode [ 423.290565][ T5989] veth0_macvtap: left promiscuous mode [ 423.323557][ T5989] veth1_vlan: left promiscuous mode [ 423.362724][ T5989] veth0_vlan: left promiscuous mode [ 423.402791][ T49] Bluetooth: hci4: command tx timeout [ 424.207824][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.169'. [ 424.712859][ T49] Bluetooth: hci6: command tx timeout [ 426.862660][ T49] Bluetooth: hci6: command tx timeout [ 428.942399][ T49] Bluetooth: hci6: command tx timeout [ 429.435423][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 429.514839][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 432.865112][ T6924] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 432.947841][ T6924] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 433.059518][ T6924] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 433.187442][ T7015] chnl_net:caif_netlink_parms(): no params data found [ 433.944955][ T6924] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 437.648823][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.657884][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.668309][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.681410][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.694047][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.855726][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 439.220760][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.243076][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.250596][ T7015] bridge_slave_0: entered allmulticast mode [ 439.285950][ T7015] bridge_slave_0: entered promiscuous mode [ 439.517474][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.528664][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.561292][ T7015] bridge_slave_1: entered allmulticast mode [ 439.595327][ T7015] bridge_slave_1: entered promiscuous mode [ 439.802655][ T5787] Bluetooth: hci1: command tx timeout [ 440.142640][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.171112][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.202618][ T7026] bridge_slave_0: entered allmulticast mode [ 440.215595][ T7026] bridge_slave_0: entered promiscuous mode [ 440.661669][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.707400][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.768510][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.776643][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.799916][ T7026] bridge_slave_1: entered allmulticast mode [ 440.826247][ T7026] bridge_slave_1: entered promiscuous mode [ 441.780467][ T7015] team0: Port device team_slave_0 added [ 441.883287][ T7015] team0: Port device team_slave_1 added [ 441.889927][ T5787] Bluetooth: hci1: command tx timeout [ 441.934013][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.968227][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.364241][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.500246][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.512634][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.632431][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.689526][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.728409][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.822504][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.932897][ T7064] chnl_net:caif_netlink_parms(): no params data found [ 443.596422][ T7026] team0: Port device team_slave_0 added [ 443.950392][ T7026] team0: Port device team_slave_1 added [ 443.962676][ T5787] Bluetooth: hci1: command tx timeout [ 444.084195][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.118706][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.128387][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.143332][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.155218][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.499765][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.517302][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.632456][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.897030][ T7015] hsr_slave_0: entered promiscuous mode [ 444.973668][ T7015] hsr_slave_1: entered promiscuous mode [ 444.981160][ T7015] debugfs: 'hsr0' already exists in 'hsr' [ 445.022959][ T7015] Cannot create hsr debugfs directory [ 445.064872][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.071917][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.172721][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.764848][ T5989] bridge_slave_1: left allmulticast mode [ 445.770679][ T5989] bridge_slave_1: left promiscuous mode [ 445.814472][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.834933][ T5989] bridge_slave_0: left allmulticast mode [ 445.840689][ T5989] bridge_slave_0: left promiscuous mode [ 445.923856][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.987643][ T5989] bridge_slave_1: left allmulticast mode [ 446.032526][ T5989] bridge_slave_1: left promiscuous mode [ 446.038709][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.052822][ T5787] Bluetooth: hci1: command tx timeout [ 446.143603][ T5989] bridge_slave_0: left allmulticast mode [ 446.149454][ T5989] bridge_slave_0: left promiscuous mode [ 446.163340][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.282851][ T5787] Bluetooth: hci2: command tx timeout [ 446.579664][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.618957][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.649426][ T5989] bond0 (unregistering): Released all slaves [ 447.054068][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.096635][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.130795][ T5989] bond0 (unregistering): Released all slaves [ 447.671011][ T7026] hsr_slave_0: entered promiscuous mode [ 447.707395][ T7026] hsr_slave_1: entered promiscuous mode [ 447.725726][ T7026] debugfs: 'hsr0' already exists in 'hsr' [ 447.731628][ T7026] Cannot create hsr debugfs directory [ 447.937039][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.952758][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.960534][ T7064] bridge_slave_0: entered allmulticast mode [ 447.995782][ T7064] bridge_slave_0: entered promiscuous mode [ 448.037857][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.057480][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.072972][ T7064] bridge_slave_1: entered allmulticast mode [ 448.105019][ T7064] bridge_slave_1: entered promiscuous mode [ 448.225389][ T5989] hsr_slave_0: left promiscuous mode [ 448.233496][ T5989] hsr_slave_1: left promiscuous mode [ 448.263055][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.303545][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.362457][ T5787] Bluetooth: hci2: command tx timeout [ 448.396935][ T5989] hsr_slave_0: left promiscuous mode [ 448.435416][ T5989] hsr_slave_1: left promiscuous mode [ 448.443607][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.472638][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.978617][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 449.034111][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 449.757922][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.764782][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.777398][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 449.826541][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 450.442940][ T5787] Bluetooth: hci2: command tx timeout [ 450.784729][ T7064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.827970][ T7064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.536422][ T7064] team0: Port device team_slave_0 added [ 451.574439][ T7064] team0: Port device team_slave_1 added [ 452.069061][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.122793][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.149557][ T7064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.357331][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.387203][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.463028][ T7064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.522689][ T5787] Bluetooth: hci2: command tx timeout [ 453.256375][ T7064] hsr_slave_0: entered promiscuous mode [ 453.275910][ T7064] hsr_slave_1: entered promiscuous mode [ 453.289894][ T7064] debugfs: 'hsr0' already exists in 'hsr' [ 453.302833][ T7064] Cannot create hsr debugfs directory [ 453.442913][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 453.702507][ T7097] mmap: syz.5.175 (7097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 456.700430][ T5989] bridge_slave_1: left allmulticast mode [ 456.717048][ T5989] bridge_slave_1: left promiscuous mode [ 456.743116][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.769863][ T5989] bridge_slave_0: left allmulticast mode [ 456.792572][ T5989] bridge_slave_0: left promiscuous mode [ 456.799113][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.735489][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.765795][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.790117][ T5989] bond0 (unregistering): Released all slaves [ 458.102824][ T5989] hsr_slave_0: left promiscuous mode [ 458.147141][ T5989] hsr_slave_1: left promiscuous mode [ 458.161167][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.208695][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.769341][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 458.807348][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 459.244635][ T7015] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.297219][ T7015] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.448746][ T7015] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.648705][ T7015] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.679991][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.703673][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.733157][ T7086] bridge_slave_0: entered allmulticast mode [ 459.777277][ T7086] bridge_slave_0: entered promiscuous mode [ 459.913944][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.921427][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.944189][ T7086] bridge_slave_1: entered allmulticast mode [ 459.969588][ T7086] bridge_slave_1: entered promiscuous mode [ 460.232490][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 460.253839][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.382610][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.402744][ T35] usb 6-1: device descriptor read/64, error -71 [ 460.618703][ T7086] team0: Port device team_slave_0 added [ 460.652612][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 460.727361][ T7086] team0: Port device team_slave_1 added [ 460.862918][ T35] usb 6-1: device descriptor read/64, error -71 [ 460.966038][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.982637][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.983773][ T35] usb usb6-port1: attempt power cycle [ 461.033547][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.089981][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.113858][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.143064][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.432699][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 461.456269][ T7086] hsr_slave_0: entered promiscuous mode [ 461.464251][ T35] usb 6-1: device descriptor read/8, error -71 [ 461.468262][ T7086] hsr_slave_1: entered promiscuous mode [ 461.485336][ T7086] debugfs: 'hsr0' already exists in 'hsr' [ 461.491560][ T7086] Cannot create hsr debugfs directory [ 461.702693][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 461.755506][ T35] usb 6-1: device descriptor read/8, error -71 [ 461.874994][ T7026] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 461.888708][ T35] usb usb6-port1: unable to enumerate USB device [ 462.003404][ T7026] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 462.091672][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.107726][ T7026] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 462.155185][ T7026] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 462.665846][ T7064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 462.768247][ T7064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 462.818083][ T7064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 462.913317][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.946250][ T7064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.120967][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.128427][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.370308][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.377838][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.796409][ T7086] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.990551][ T7086] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.071672][ T7086] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.145213][ T7086] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.593629][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.872597][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.990452][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.998058][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.216881][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.224270][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.309612][ T7064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.960670][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.009070][ T7064] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.148441][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.155998][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.320285][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.327875][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.072490][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.471302][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.634274][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.641740][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.850867][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.858433][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.425693][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.015191][ T7015] veth0_vlan: entered promiscuous mode [ 471.355745][ T7015] veth1_vlan: entered promiscuous mode [ 471.586572][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.088133][ T7015] veth0_macvtap: entered promiscuous mode [ 472.239464][ T7015] veth1_macvtap: entered promiscuous mode [ 472.628331][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.890819][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.931494][ T7064] veth0_vlan: entered promiscuous mode [ 473.072665][ T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.088936][ T5989] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.194615][ T5989] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.292741][ T81] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.347693][ T7064] veth1_vlan: entered promiscuous mode [ 473.577646][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.771740][ T7026] veth0_vlan: entered promiscuous mode [ 474.141190][ T7026] veth1_vlan: entered promiscuous mode [ 474.233465][ T7064] veth0_macvtap: entered promiscuous mode [ 474.333207][ T7064] veth1_macvtap: entered promiscuous mode [ 474.711328][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.893959][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.914045][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 475.079139][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.093632][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 475.121763][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.135888][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.172477][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.226257][ T10] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 475.249371][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.290575][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.294344][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.318740][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.319098][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.359640][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.376949][ T10] usb 6-1: config 0 descriptor?? [ 475.393965][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.421572][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.449499][ T7026] veth0_macvtap: entered promiscuous mode [ 475.748263][ T7026] veth1_macvtap: entered promiscuous mode [ 476.108891][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.217712][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.405689][ T53] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.418680][ T81] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.639617][ T81] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.735844][ T81] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.062006][ T7086] veth0_vlan: entered promiscuous mode [ 477.200921][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.390318][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.564811][ T5787] Bluetooth: hci3: command tx timeout [ 477.643289][ T7086] veth1_vlan: entered promiscuous mode [ 477.661950][ T10] usb 6-1: USB disconnect, device number 6 [ 477.728374][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.900641][ T7242] futex_wake_op: syz.5.185 tries to shift op by 144; fix this program [ 477.959599][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.691079][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 478.959308][ T57] bridge_slave_1: left allmulticast mode [ 478.992315][ T57] bridge_slave_1: left promiscuous mode [ 478.998958][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.079904][ T57] bridge_slave_0: left allmulticast mode [ 479.102438][ T57] bridge_slave_0: left promiscuous mode [ 479.109018][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.732849][ T5787] Bluetooth: hci3: command tx timeout [ 480.168570][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.178996][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.189633][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.439999][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.554081][ T7265] netlink: 'syz.5.186': attribute type 4 has an invalid length. [ 480.590186][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.477861][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.496702][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.553742][ T57] bond0 (unregistering): Released all slaves [ 481.710824][ T7086] veth0_macvtap: entered promiscuous mode [ 481.824480][ T49] Bluetooth: hci3: command tx timeout [ 482.089974][ T57] hsr_slave_0: left promiscuous mode [ 482.192674][ T57] hsr_slave_1: left promiscuous mode [ 482.258780][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.334239][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.394984][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.437735][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.523159][ T57] veth1_macvtap: left promiscuous mode [ 482.528879][ T57] veth0_macvtap: left promiscuous mode [ 482.550601][ T57] veth1_vlan: left promiscuous mode [ 482.556291][ T57] veth0_vlan: left promiscuous mode [ 483.112532][ T49] Bluetooth: hci4: command tx timeout [ 483.989403][ T49] Bluetooth: hci3: command tx timeout [ 484.008089][ T57] team0 (unregistering): Port device team_slave_1 removed [ 484.040558][ T57] team0 (unregistering): Port device team_slave_0 removed [ 484.424418][ T7086] veth1_macvtap: entered promiscuous mode [ 485.162516][ T49] Bluetooth: hci4: command tx timeout [ 485.530758][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.839800][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.930526][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.938540][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.947769][ T7209] bridge_slave_0: entered allmulticast mode [ 485.958710][ T7209] bridge_slave_0: entered promiscuous mode [ 486.083999][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.195289][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.225478][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.233777][ T7209] bridge_slave_1: entered allmulticast mode [ 486.254919][ T7209] bridge_slave_1: entered promiscuous mode [ 486.289743][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.370489][ T53] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.380812][ T53] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.391385][ T53] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.400907][ T5993] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.446229][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.640597][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.676418][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.806158][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.244573][ T49] Bluetooth: hci4: command tx timeout [ 488.076254][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.140328][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.170693][ T7209] team0: Port device team_slave_0 added [ 488.330433][ T7209] team0: Port device team_slave_1 added [ 488.849422][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.892895][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.994680][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.293701][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.300832][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.343128][ T49] Bluetooth: hci4: command tx timeout [ 489.432838][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.682998][ T7260] chnl_net:caif_netlink_parms(): no params data found [ 490.126555][ T57] bridge_slave_1: left allmulticast mode [ 490.164322][ T57] bridge_slave_1: left promiscuous mode [ 490.193407][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.265812][ T57] bridge_slave_0: left allmulticast mode [ 490.312771][ T57] bridge_slave_0: left promiscuous mode [ 490.339364][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.544815][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.598739][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.640227][ T57] bond0 (unregistering): Released all slaves [ 492.212739][ T57] hsr_slave_0: left promiscuous mode [ 492.250797][ T57] hsr_slave_1: left promiscuous mode [ 492.273556][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.281133][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.366220][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.421474][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.535901][ T57] veth1_macvtap: left promiscuous mode [ 492.541630][ T57] veth0_macvtap: left promiscuous mode [ 492.598867][ T57] veth1_vlan: left promiscuous mode [ 492.618677][ T57] veth0_vlan: left promiscuous mode [ 494.192918][ T6940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 494.393878][ T6940] usb 6-1: Using ep0 maxpacket: 16 [ 494.406115][ T57] team0 (unregistering): Port device team_slave_1 removed [ 494.418630][ T6940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.443019][ T6940] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.457519][ T57] team0 (unregistering): Port device team_slave_0 removed [ 494.465166][ T6940] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 494.502315][ T6940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.529664][ T6940] usb 6-1: config 0 descriptor?? [ 494.739894][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.769077][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.789397][ T7209] hsr_slave_0: entered promiscuous mode [ 494.813908][ T7209] hsr_slave_1: entered promiscuous mode [ 494.833086][ T7209] debugfs: 'hsr0' already exists in 'hsr' [ 494.838998][ T7209] Cannot create hsr debugfs directory [ 495.884880][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.904915][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.925279][ T7260] bridge_slave_0: entered allmulticast mode [ 495.941317][ T7260] bridge_slave_0: entered promiscuous mode [ 495.995086][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.014655][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.029719][ T7260] bridge_slave_1: entered allmulticast mode [ 496.039900][ T7260] bridge_slave_1: entered promiscuous mode [ 496.300784][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.381593][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.657889][ T7260] team0: Port device team_slave_0 added [ 496.666351][ T7365] futex_wake_op: syz.2.192 tries to shift op by 144; fix this program [ 496.760512][ T7260] team0: Port device team_slave_1 added [ 497.028489][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.037097][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.096428][ T10] usb 6-1: USB disconnect, device number 7 [ 497.155377][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.200074][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.222308][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.282497][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.380321][ T7373] ======================================================= [ 498.380321][ T7373] WARNING: The mand mount option has been deprecated and [ 498.380321][ T7373] and is ignored by this kernel. Remove the mand [ 498.380321][ T7373] option from the mount to silence this warning. [ 498.380321][ T7373] ======================================================= [ 498.855437][ T7373] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 504.828194][ T7260] hsr_slave_0: entered promiscuous mode [ 504.866697][ T7260] hsr_slave_1: entered promiscuous mode [ 504.927791][ T7260] debugfs: 'hsr0' already exists in 'hsr' [ 504.955718][ T7260] Cannot create hsr debugfs directory [ 505.683324][ T7209] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 505.787006][ T7209] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 505.813706][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.838360][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.853972][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.894750][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.917662][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.105065][ T7209] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.151207][ T7209] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 507.368757][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.378316][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.755044][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.811813][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.970828][ T49] Bluetooth: hci5: command tx timeout [ 508.440392][ T5989] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.499910][ T5989] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.518032][ T5989] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.678075][ T5994] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.747248][ T53] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.962021][ T53] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.179159][ T53] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.212317][ T35] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 509.301191][ T53] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.404375][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 509.435641][ T35] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.463435][ T35] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.477148][ T35] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 509.490091][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.526733][ T35] usb 3-1: config 0 descriptor?? [ 509.687596][ T7416] futex_wake_op: syz.5.202 tries to shift op by 144; fix this program [ 509.907904][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.042684][ T49] Bluetooth: hci5: command tx timeout [ 510.058340][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 510.156172][ T53] bridge_slave_1: left allmulticast mode [ 510.162033][ T53] bridge_slave_1: left promiscuous mode [ 510.176345][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.190147][ T53] bridge_slave_0: left allmulticast mode [ 510.196524][ T53] bridge_slave_0: left promiscuous mode [ 510.203894][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.709124][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.747317][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.767355][ T53] bond0 (unregistering): Released all slaves [ 510.850538][ T7260] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.978640][ T53] hsr_slave_0: left promiscuous mode [ 510.999035][ T53] hsr_slave_1: left promiscuous mode [ 511.025424][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.038539][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.055469][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.063368][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.086405][ T53] veth1_macvtap: left promiscuous mode [ 511.093008][ T53] veth0_macvtap: left promiscuous mode [ 511.099113][ T53] veth1_vlan: left promiscuous mode [ 511.104989][ T53] veth0_vlan: left promiscuous mode [ 511.198853][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.209930][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.657720][ T53] team0 (unregistering): Port device team_slave_1 removed [ 511.713800][ T53] team0 (unregistering): Port device team_slave_0 removed [ 511.984158][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.004622][ T7260] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 512.089667][ T7260] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 512.115507][ T5431] usb 3-1: USB disconnect, device number 2 [ 512.124571][ T49] Bluetooth: hci5: command tx timeout [ 512.181306][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.188856][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.295301][ T7260] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 512.388013][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.395562][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.645259][ T5431] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 512.813126][ T5431] usb 3-1: device descriptor read/64, error -71 [ 512.883879][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.891472][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.899959][ T7393] bridge_slave_0: entered allmulticast mode [ 512.909453][ T7393] bridge_slave_0: entered promiscuous mode [ 512.926939][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.935396][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.943587][ T7393] bridge_slave_1: entered allmulticast mode [ 512.955184][ T7393] bridge_slave_1: entered promiscuous mode [ 513.060988][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.075526][ T5431] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 513.109633][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.234827][ T5431] usb 3-1: device descriptor read/64, error -71 [ 513.300422][ T7393] team0: Port device team_slave_0 added [ 513.336467][ T7393] team0: Port device team_slave_1 added [ 513.343949][ T5431] usb usb3-port1: attempt power cycle [ 513.503234][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.510365][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.538906][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.581272][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.589252][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.617924][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.692594][ T5431] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 513.738614][ T5431] usb 3-1: device descriptor read/8, error -71 [ 513.790854][ T7393] hsr_slave_0: entered promiscuous mode [ 513.799789][ T7393] hsr_slave_1: entered promiscuous mode [ 513.809421][ T7393] debugfs: 'hsr0' already exists in 'hsr' [ 513.815474][ T7393] Cannot create hsr debugfs directory [ 513.987420][ T5431] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 514.013805][ T5431] usb 3-1: device descriptor read/8, error -71 [ 514.044569][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.124640][ T5431] usb usb3-port1: unable to enumerate USB device [ 514.203077][ T49] Bluetooth: hci5: command tx timeout [ 514.226829][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.881848][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.034359][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.041933][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.067484][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.075189][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.543319][ T7452] futex_wake_op: syz.5.210 tries to shift op by 144; fix this program [ 515.980301][ T7393] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 516.083533][ T7393] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 516.145252][ T7393] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 516.252913][ T6287] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 516.306270][ T7393] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 516.349206][ T7209] veth0_vlan: entered promiscuous mode [ 516.442667][ T6287] usb 3-1: Using ep0 maxpacket: 16 [ 516.491443][ T6287] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.503387][ T7209] veth1_vlan: entered promiscuous mode [ 516.557992][ T6287] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.582241][ T6287] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.589261][ T6287] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 516.612649][ T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 516.648142][ T6287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.698395][ T6287] usb 3-1: config 0 descriptor?? [ 516.785187][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 516.816683][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.849839][ T35] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 516.882992][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 516.901936][ T35] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 516.914576][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.963435][ T35] usb 6-1: config 0 descriptor?? [ 516.991319][ T35] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 517.060706][ T7209] veth0_macvtap: entered promiscuous mode [ 517.119289][ T7209] veth1_macvtap: entered promiscuous mode [ 517.197849][ T6287] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 517.281669][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.416625][ T5431] usb 3-1: USB disconnect, device number 7 [ 517.530276][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.558163][ T7464] fido_id[7464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 517.636392][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.752018][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.803406][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.833863][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.885285][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.248272][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.528054][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.611819][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.619486][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.758732][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.766339][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.736158][ T35] usb 6-1: USB disconnect, device number 8 [ 520.009233][ T7488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.934138][ T7260] veth0_vlan: entered promiscuous mode [ 521.168962][ T7260] veth1_vlan: entered promiscuous mode [ 521.960510][ T7260] veth0_macvtap: entered promiscuous mode [ 522.119680][ T7260] veth1_macvtap: entered promiscuous mode [ 522.426050][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.522645][ T5431] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 522.569159][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.698890][ T5431] usb 3-1: device descriptor read/64, error -71 [ 522.740922][ T5993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.783217][ T5993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.850431][ T5993] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.888503][ T5993] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.926941][ T7506] futex_wake_op: syz.5.220 tries to shift op by 144; fix this program [ 522.973662][ T5431] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 523.017033][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.114154][ T5431] usb 3-1: device descriptor read/64, error -71 [ 523.257923][ T5431] usb usb3-port1: attempt power cycle [ 523.632465][ T5431] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 523.703969][ T5431] usb 3-1: device descriptor read/8, error -71 [ 523.952925][ T5431] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 524.001674][ T5431] usb 3-1: device descriptor read/8, error -71 [ 524.125000][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 524.141256][ T5431] usb usb3-port1: unable to enumerate USB device [ 524.303024][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 524.333834][ T35] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.367018][ T35] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.412869][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.434722][ T35] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 524.472398][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.506488][ T35] usb 6-1: config 0 descriptor?? [ 525.080391][ T35] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 525.139390][ T7393] veth0_vlan: entered promiscuous mode [ 525.258453][ T35] usb 6-1: USB disconnect, device number 9 [ 525.381032][ T7393] veth1_vlan: entered promiscuous mode [ 525.678032][ T7542] fido_id[7542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 525.850028][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.941236][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.201906][ T7393] veth0_macvtap: entered promiscuous mode [ 526.281729][ T7393] veth1_macvtap: entered promiscuous mode [ 526.364983][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.388494][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.502408][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 526.601766][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.692457][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 526.721985][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.733279][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.788455][ T10] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.831558][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 526.862433][ T10] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 526.871786][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.889240][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.931126][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.945045][ T10] usb 6-1: config 0 descriptor?? [ 527.010554][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.060472][ T81] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.095408][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 529.604707][ T35] usb 6-1: USB disconnect, device number 10 [ 531.796817][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.936966][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.606860][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.681993][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.716277][ T7601] futex_wake_op: syz.5.228 tries to shift op by 144; fix this program [ 533.954819][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 534.582493][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 534.594641][ T35] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.606065][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 534.641176][ T35] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 534.693622][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.758124][ T35] usb 8-1: config 0 descriptor?? [ 536.260108][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 536.302781][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 536.346712][ T35] usb 8-1: USB disconnect, device number 2 [ 540.363183][ T7661] futex_wake_op: syz.2.241 tries to shift op by 144; fix this program [ 542.013035][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.558998][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.643866][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.971559][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.119499][ T5994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.145938][ T5994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.392564][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.442465][ T5834] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 543.621721][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.662443][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 543.698532][ T5834] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.762339][ T5834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 543.782340][ T5834] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 543.791606][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.928387][ T5834] usb 8-1: config 0 descriptor?? [ 548.399761][ T1141] bridge_slave_1: left allmulticast mode [ 548.484354][ T1141] bridge_slave_1: left promiscuous mode [ 548.490949][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.165617][ T7710] affs: No valid root block on device nullb0 [ 550.692781][ T7707] futex_wake_op: syz.2.254 tries to shift op by 144; fix this program [ 551.363089][ T1141] bridge_slave_0: left allmulticast mode [ 551.457353][ T1141] bridge_slave_0: left promiscuous mode [ 551.532699][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.975555][ T5834] usbhid 8-1:0.0: can't add hid device: -71 [ 551.982284][ T5834] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 552.001654][ T5834] usb 8-1: USB disconnect, device number 3 [ 553.263608][ T7726] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 557.985174][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.093626][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.126913][ T1141] bond0 (unregistering): Released all slaves [ 559.221187][ T7741] syzkaller0: entered promiscuous mode [ 559.275425][ T7741] syzkaller0: entered allmulticast mode [ 560.352963][ T6287] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 560.553234][ T6287] usb 10-1: Using ep0 maxpacket: 16 [ 560.609280][ T6287] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.702563][ T6287] usb 10-1: config 0 interface 0 has no altsetting 0 [ 560.782466][ T6287] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 560.872608][ T6287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.007539][ T6287] usb 10-1: config 0 descriptor?? [ 561.997548][ T7759] futex_wake_op: syz.7.266 tries to shift op by 144; fix this program [ 562.018265][ T6287] usbhid 10-1:0.0: can't add hid device: -71 [ 562.029194][ T6287] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 562.048650][ T6287] usb 10-1: USB disconnect, device number 2 [ 562.237815][ T1141] hsr_slave_0: left promiscuous mode [ 562.715311][ T1141] hsr_slave_1: left promiscuous mode [ 563.021950][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.030470][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.105181][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.151925][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.321476][ T1141] veth1_macvtap: left promiscuous mode [ 563.356214][ T1141] veth0_macvtap: left promiscuous mode [ 563.393142][ T1141] veth1_vlan: left promiscuous mode [ 563.398710][ T1141] veth0_vlan: left promiscuous mode [ 563.436382][ T7774] autofs: Unknown parameter 'fd00000000000000000000' [ 564.762443][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 565.046433][ T7785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.795251][ T7797] binder: 7796:7797 unknown command 0 [ 567.800831][ T7797] binder: 7796:7797 ioctl c0306201 2000000007c0 returned -22 [ 568.135589][ T7800] affs: No valid root block on device nullb0 [ 570.101134][ T6287] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 570.307086][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 570.315884][ T6287] usb 10-1: Using ep0 maxpacket: 32 [ 570.375961][ T6287] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.398878][ T6287] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 570.431540][ T6287] usb 10-1: config 0 interface 0 has no altsetting 0 [ 570.475013][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 570.537310][ T6287] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 570.552539][ T6287] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.561324][ T6287] usb 10-1: Product: syz [ 570.591729][ T6287] usb 10-1: Manufacturer: syz [ 570.599379][ T6287] usb 10-1: SerialNumber: syz [ 570.648046][ T6287] usb 10-1: config 0 descriptor?? [ 571.189694][ T6287] gs_usb 10-1:0.0: Configuring for 5 interfaces [ 571.618443][ T6287] gs_usb 10-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 572.123709][ T6287] gs_usb 10-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 572.184105][ T6287] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71 [ 573.469357][ T5834] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 573.524256][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 574.514988][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.521611][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.552667][ T5834] usb 6-1: device descriptor read/64, error -32 [ 575.767059][ T6287] usb 10-1: USB disconnect, device number 3 [ 575.803854][ T5834] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 576.401388][ T1141] IPVS: stop unused estimator thread 0... [ 577.715948][ T7844] capability: warning: `syz.9.288' uses deprecated v2 capabilities in a way that may be insecure [ 578.403072][ T7848] affs: No valid root block on device nullb0 [ 583.216795][ T7860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.206855][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 584.268237][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 584.278732][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 584.309572][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 584.328953][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 586.312839][ T5834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 586.445696][ T5787] Bluetooth: hci2: command tx timeout [ 586.657259][ T5834] usb 9-1: Using ep0 maxpacket: 16 [ 587.000023][ T5834] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.132583][ T5834] usb 9-1: config 0 interface 0 has no altsetting 0 [ 587.139463][ T5834] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 587.629016][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.689184][ T5834] usb 9-1: config 0 descriptor?? [ 588.674777][ T5787] Bluetooth: hci2: command tx timeout [ 589.839552][ T5834] usbhid 9-1:0.0: can't add hid device: -71 [ 589.867248][ T5834] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 589.949332][ T5834] usb 9-1: USB disconnect, device number 2 [ 590.032330][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 590.249246][ T10] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 590.302969][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.321391][ T10] usb 6-1: config 0 has no interface number 0 [ 590.362745][ T10] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 590.408475][ T10] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.504951][ T10] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 590.566572][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.604801][ T10] usb 6-1: Product: syz [ 590.644397][ T10] usb 6-1: Manufacturer: syz [ 590.673053][ T10] usb 6-1: SerialNumber: syz [ 590.692851][ T5787] Bluetooth: hci2: command tx timeout [ 590.731347][ T10] usb 6-1: config 0 descriptor?? [ 590.770689][ T7887] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 590.870017][ T10] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 590.928045][ T10] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 591.029071][ T10] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 591.164766][ T10] usb 6-1: USB disconnect, device number 13 [ 591.282623][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 591.385451][ T10] cyberjack 6-1:0.69: device disconnected [ 591.510199][ T7904] affs: No valid root block on device nullb0 [ 591.704042][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 593.642764][ T5787] Bluetooth: hci2: command tx timeout [ 596.856327][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.8.305'. [ 596.864669][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.071509][ T6287] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 600.221941][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.260600][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.284039][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 600.292895][ T6287] usb 10-1: Using ep0 maxpacket: 16 [ 600.358621][ T6287] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.374868][ T7859] bridge_slave_0: entered allmulticast mode [ 600.408302][ T6287] usb 10-1: config 0 interface 0 has no altsetting 0 [ 600.420567][ T7859] bridge_slave_0: entered promiscuous mode [ 600.435947][ T6287] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 600.483443][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.490919][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.522567][ T6287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.591144][ T7859] bridge_slave_1: entered allmulticast mode [ 600.618564][ T6287] usb 10-1: config 0 descriptor?? [ 600.673662][ T7859] bridge_slave_1: entered promiscuous mode [ 601.132363][ T5834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 601.386502][ T5834] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 601.417336][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.442820][ T5834] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.492736][ T5834] usb 9-1: config 0 has no interface number 0 [ 601.522646][ T5834] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 601.552430][ T5834] usb 9-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.595774][ T5834] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 601.632391][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.682494][ T5834] usb 9-1: Product: syz [ 601.686863][ T5834] usb 9-1: Manufacturer: syz [ 601.691622][ T5834] usb 9-1: SerialNumber: syz [ 601.748030][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.858707][ T5834] usb 9-1: config 0 descriptor?? [ 601.906886][ T7952] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 601.928333][ T6287] usbhid 10-1:0.0: can't add hid device: -71 [ 601.937177][ T6287] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 603.284126][ T5834] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 604.269754][ T5834] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 604.287856][ T6287] usb 10-1: USB disconnect, device number 4 [ 604.520569][ T5834] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 605.346002][ T5834] usb 9-1: USB disconnect, device number 3 [ 605.381254][ T5834] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 605.586118][ T5834] cyberjack 9-1:0.69: device disconnected [ 608.075518][ T7859] team0: Port device team_slave_0 added [ 608.113193][ T7973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.423200][ T7859] team0: Port device team_slave_1 added [ 610.644820][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 611.919787][ T7996] syz.8.323: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 612.073020][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: syz.8.323 Not tainted syzkaller #0 PREEMPT(full) [ 612.073161][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.073228][ T7996] Call Trace: [ 612.073258][ T7996] [ 612.073289][ T7996] __dump_stack+0x26/0x30 [ 612.073410][ T7996] dump_stack_lvl+0x14c/0x1c0 [ 612.073509][ T7996] dump_stack+0x1e/0x25 [ 612.073597][ T7996] warn_alloc+0x46f/0x6a0 [ 612.073713][ T7996] ? kmsan_get_metadata+0xf1/0x160 [ 612.073848][ T7996] __vmalloc_node_range_noprof+0x142/0x2d80 [ 612.073963][ T7996] ? should_fail_ex+0x45/0x8c0 [ 612.074059][ T7996] ? kmsan_get_metadata+0xf1/0x160 [ 612.074173][ T7996] ? kmsan_get_metadata+0xf1/0x160 [ 612.074288][ T7996] ? kmsan_get_metadata+0xf1/0x160 [ 612.074406][ T7996] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 612.074529][ T7996] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 612.074617][ T7996] ? kmsan_get_metadata+0xf1/0x160 [ 612.074736][ T7996] vmalloc_user_noprof+0xce/0x140 [ 612.074832][ T7996] ? xskq_create+0x11d/0x290 [ 612.074942][ T7996] xskq_create+0x11d/0x290 [ 612.075049][ T7996] xsk_init_queue+0xce/0x180 [ 612.075151][ T7996] xsk_setsockopt+0x7f6/0xfe0 [ 612.075257][ T7996] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.075354][ T7996] __sys_setsockopt+0x43e/0x580 [ 612.075463][ T7996] __x64_sys_setsockopt+0xf4/0x1a0 [ 612.075568][ T7996] x64_sys_call+0x2a65/0x3ea0 [ 612.075673][ T7996] do_syscall_64+0x134/0xf80 [ 612.075772][ T7996] ? clear_bhb_loop+0x50/0xa0 [ 612.075860][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.075957][ T7996] RIP: 0033:0x7f829799c799 [ 612.076029][ T7996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.076104][ T7996] RSP: 002b:00007f82988a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.076185][ T7996] RAX: ffffffffffffffda RBX: 00007f8297c16090 RCX: 00007f829799c799 [ 612.076248][ T7996] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 612.076299][ T7996] RBP: 00007f8297a32c99 R08: 0000000000000004 R09: 0000000000000000 [ 612.076352][ T7996] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.076406][ T7996] R13: 00007f8297c16128 R14: 00007f8297c16090 R15: 00007fff60d38318 [ 612.076487][ T7996] [ 612.076522][ T7996] Mem-Info: [ 612.403973][ T7996] active_anon:18213 inactive_anon:0 isolated_anon:0 [ 612.403973][ T7996] active_file:18340 inactive_file:40126 isolated_file:0 [ 612.403973][ T7996] unevictable:768 dirty:44 writeback:0 [ 612.403973][ T7996] slab_reclaimable:5595 slab_unreclaimable:23262 [ 612.403973][ T7996] mapped:36686 shmem:11623 pagetables:2048 [ 612.403973][ T7996] sec_pagetables:0 bounce:0 [ 612.403973][ T7996] kernel_misc_reclaimable:0 [ 612.403973][ T7996] free:328439 free_pcp:12480 free_cma:0 [ 612.459479][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.543307][ T7996] Node 0 active_anon:72988kB inactive_anon:0kB active_file:73312kB inactive_file:160304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144520kB dirty:176kB writeback:0kB shmem:44956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5776kB pagetables:7836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 612.617341][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.716870][ T8000] binder: 7999:8000 ioctl c0306201 200000000080 returned -22 [ 612.869085][ T7996] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 612.922013][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.995626][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.024398][ T7996] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 613.042434][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.154615][ T7996] lowmem_reserve[]: 0 927 1240 1240 1240 [ 613.160787][ T7996] Node 0 DMA32 free:401496kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40692kB inactive_anon:0kB active_file:68976kB inactive_file:86248kB unevictable:0kB writepending:124kB zspages:0kB present:3129332kB managed:949724kB mlocked:0kB bounce:0kB free_pcp:30024kB local_pcp:5636kB free_cma:0kB [ 613.292765][ T7996] lowmem_reserve[]: 0 0 313 313 313 [ 613.298495][ T7996] Node 0 Normal free:16272kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30868kB inactive_anon:0kB active_file:4268kB inactive_file:74056kB unevictable:1536kB writepending:52kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:9656kB local_pcp:6932kB free_cma:0kB [ 613.332004][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.416899][ T7996] lowmem_reserve[]: 0 0 0 0 0 [ 613.524343][ T7996] Node 1 Normal free:893516kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:10688kB local_pcp:10336kB free_cma:0kB [ 613.673269][ T7996] lowmem_reserve[]: 0 0 0 0 0 [ 613.700359][ T7996] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 613.798134][ T7996] Node 0 DMA32: 748*4kB (UM) 358*8kB (UME) 215*16kB (UM) 188*32kB (UME) 115*64kB (UM) 120*128kB (UM) 229*256kB (UME) 144*512kB (UM) 92*1024kB (UM) 56*2048kB (UME) 6*4096kB (UM) = 403856kB [ 613.883533][ T7996] Node 0 Normal: 0*4kB 2*8kB (UM) 2*16kB (UE) 35*32kB (UM) 18*64kB (UME) 11*128kB (UM) 13*256kB (UME) 8*512kB (UE) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 16272kB [ 613.907194][ T7859] hsr_slave_0: entered promiscuous mode [ 613.939381][ T7859] hsr_slave_1: entered promiscuous mode [ 613.955480][ T7859] debugfs: 'hsr0' already exists in 'hsr' [ 613.967519][ T7859] Cannot create hsr debugfs directory [ 613.987186][ T7996] Node 1 Normal: 1*4kB (U) 1*8kB (U) 3*16kB (U) 4*32kB (UM) 9*64kB (UM) 9*128kB (UM) 9*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 214*4096kB (UM) = 893564kB [ 614.087077][ T7996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.202720][ T7996] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 614.302638][ T7996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.402869][ T7996] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 614.507074][ T7996] 70954 total pagecache pages [ 614.511941][ T7996] 0 pages in swap cache [ 614.579390][ T7996] Free swap = 124996kB [ 614.599931][ T7996] Total swap = 124996kB [ 614.666733][ T7996] 2097051 pages RAM [ 614.670736][ T7996] 0 pages HighMem/MovableOnly [ 614.837203][ T7996] 1531883 pages reserved [ 614.837422][ T7996] 0 pages cma reserved [ 616.414535][ T6940] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 616.664550][ T6940] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 616.724906][ T6940] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.778293][ T6940] usb 10-1: config 0 has no interface number 0 [ 616.806985][ T6940] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 616.877248][ T6940] usb 10-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.950964][ T6940] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 617.012284][ T6940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.078630][ T6940] usb 10-1: Product: syz [ 617.110033][ T6940] usb 10-1: Manufacturer: syz [ 617.134316][ T6940] usb 10-1: SerialNumber: syz [ 617.195578][ T6940] usb 10-1: config 0 descriptor?? [ 617.269705][ T8015] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 617.338151][ T6940] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 617.431044][ T6940] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 617.482853][ T5834] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 617.524974][ T6940] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 617.747243][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.764545][ T8023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.794167][ T6940] usb 10-1: USB disconnect, device number 5 [ 617.844233][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.908285][ T6940] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 617.922354][ T5834] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.018973][ T6940] cyberjack 10-1:0.69: device disconnected [ 618.031852][ T5834] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.162549][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.300179][ T5834] usb 9-1: config 0 descriptor?? [ 619.141232][ T5834] usbhid 9-1:0.0: can't add hid device: -71 [ 619.187402][ T5834] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 619.291976][ T5834] usb 9-1: USB disconnect, device number 4 [ 622.752144][ T7859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 622.930097][ T7859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 623.150565][ T7859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 623.465957][ T7859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 626.140211][ T8063] syz.9.340: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 626.237357][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.9.340 Not tainted syzkaller #0 PREEMPT(full) [ 626.237499][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.237579][ T8063] Call Trace: [ 626.237626][ T8063] [ 626.237671][ T8063] __dump_stack+0x26/0x30 [ 626.237827][ T8063] dump_stack_lvl+0x14c/0x1c0 [ 626.237987][ T8063] dump_stack+0x1e/0x25 [ 626.238125][ T8063] warn_alloc+0x46f/0x6a0 [ 626.238308][ T8063] ? kmsan_get_metadata+0xf1/0x160 [ 626.238501][ T8063] __vmalloc_node_range_noprof+0x142/0x2d80 [ 626.238680][ T8063] ? should_fail_ex+0x45/0x8c0 [ 626.238840][ T8063] ? kmsan_get_metadata+0xf1/0x160 [ 626.239023][ T8063] ? kmsan_get_metadata+0xf1/0x160 [ 626.239203][ T8063] ? kmsan_get_metadata+0xf1/0x160 [ 626.239388][ T8063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 626.239581][ T8063] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 626.239719][ T8063] ? kmsan_get_metadata+0xf1/0x160 [ 626.239910][ T8063] vmalloc_user_noprof+0xce/0x140 [ 626.240062][ T8063] ? xskq_create+0x11d/0x290 [ 626.240228][ T8063] xskq_create+0x11d/0x290 [ 626.240397][ T8063] xsk_init_queue+0xce/0x180 [ 626.240554][ T8063] xsk_setsockopt+0x7f6/0xfe0 [ 626.240728][ T8063] ? __pfx_xsk_setsockopt+0x10/0x10 [ 626.240880][ T8063] __sys_setsockopt+0x43e/0x580 [ 626.241053][ T8063] __x64_sys_setsockopt+0xf4/0x1a0 [ 626.241222][ T8063] x64_sys_call+0x2a65/0x3ea0 [ 626.241388][ T8063] do_syscall_64+0x134/0xf80 [ 626.241536][ T8063] ? clear_bhb_loop+0x50/0xa0 [ 626.241678][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.241818][ T8063] RIP: 0033:0x7f32fd99c799 [ 626.241915][ T8063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.242034][ T8063] RSP: 002b:00007f32fe7a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 626.242156][ T8063] RAX: ffffffffffffffda RBX: 00007f32fdc16090 RCX: 00007f32fd99c799 [ 626.242252][ T8063] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 626.242332][ T8063] RBP: 00007f32fda32c99 R08: 0000000000000004 R09: 0000000000000000 [ 626.242415][ T8063] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.242500][ T8063] R13: 00007f32fdc16128 R14: 00007f32fdc16090 R15: 00007fffb9ea2f28 [ 626.242630][ T8063] [ 627.035397][ T8063] Mem-Info: [ 627.042384][ T8063] active_anon:13480 inactive_anon:0 isolated_anon:0 [ 627.042384][ T8063] active_file:18308 inactive_file:40130 isolated_file:0 [ 627.042384][ T8063] unevictable:768 dirty:92 writeback:0 [ 627.042384][ T8063] slab_reclaimable:5596 slab_unreclaimable:23395 [ 627.042384][ T8063] mapped:39132 shmem:6871 pagetables:1992 [ 627.042384][ T8063] sec_pagetables:0 bounce:0 [ 627.042384][ T8063] kernel_misc_reclaimable:0 [ 627.042384][ T8063] free:333192 free_pcp:12323 free_cma:0 [ 628.231428][ T8063] Node 0 active_anon:41276kB inactive_anon:0kB active_file:73184kB inactive_file:160320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144984kB dirty:384kB writeback:0kB shmem:13384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5728kB pagetables:7612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.431873][ T8063] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.582718][ T8063] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.806856][ T8063] lowmem_reserve[]: 0 927 1240 1240 1240 [ 628.878770][ T8063] Node 0 DMA32 free:426864kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19740kB inactive_anon:0kB active_file:68916kB inactive_file:86264kB unevictable:0kB writepending:196kB zspages:0kB present:3129332kB managed:949724kB mlocked:0kB bounce:0kB free_pcp:24176kB local_pcp:21260kB free_cma:0kB [ 629.087015][ T8063] lowmem_reserve[]: 0 0 313 313 313 [ 629.093222][ T6940] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 629.139887][ T8063] Node 0 Normal free:16272kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26172kB inactive_anon:0kB active_file:4268kB inactive_file:74056kB unevictable:1536kB writepending:140kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:14352kB local_pcp:6884kB free_cma:0kB [ 629.243261][ T8063] lowmem_reserve[]: 0 0 0 0 0 [ 629.334011][ T8074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.223811][ T8063] Node 1 Normal free:894924kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:9328kB local_pcp:9328kB free_cma:0kB [ 630.760488][ T6940] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 630.773134][ T8063] lowmem_reserve[]: 0 0 0 0 0 [ 630.778312][ T8063] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 630.780750][ T6940] usb 9-1: config 0 has no interface number 0 [ 630.829457][ T6940] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 630.864640][ T6940] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 630.898384][ T8063] Node 0 DMA32: 1042*4kB (UM) 728*8kB (UME) 253*16kB (UM) 458*32kB (UME) 245*64kB (UM) 175*128kB (UM) 228*256kB (UME) 144*512kB (UM) 92*1024kB (UM) 56*2048kB (UME) 6*4096kB (UM) = 432344kB [ 631.001540][ T6940] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 631.021952][ T8063] Node 0 Normal: 0*4kB 2*8kB (UM) 2*16kB (UE) 35*32kB (UM) 18*64kB (UME) 11*128kB (UM) 13*256kB (UME) 8*512kB (UE) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 16272kB [ 631.043595][ T6940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.051755][ T6940] usb 9-1: Product: syz [ 631.104154][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 631.127360][ T6940] usb 9-1: Manufacturer: syz [ 631.156830][ T8063] Node 1 [ 631.156884][ T6940] usb 9-1: SerialNumber: syz [ 631.156922][ T8063] Normal: [ 631.169814][ T6940] usb 9-1: config 0 descriptor?? [ 631.188769][ T8072] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 631.263419][ T8063] 1*4kB (U) 1*8kB (U) 6*16kB (U) 9*32kB (UM) 9*64kB (UM) 8*128kB (UM) 8*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 215*4096kB (UM) = 894924kB [ 631.265883][ T6940] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 632.279373][ T6940] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 632.294526][ T6940] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 632.493808][ T8063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.613765][ T8063] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.657019][ T8063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.743774][ T8063] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.776644][ T8063] 60854 total pagecache pages [ 632.830138][ T8063] 0 pages in swap cache [ 632.868533][ T6940] usb 9-1: USB disconnect, device number 5 [ 632.876715][ T8063] Free swap = 124996kB [ 632.912414][ T8063] Total swap = 124996kB [ 632.958471][ T8063] 2097051 pages RAM [ 632.971748][ T6940] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 633.012753][ T8063] 0 pages HighMem/MovableOnly [ 633.048700][ T8063] 1531883 pages reserved [ 633.075234][ T8063] 0 pages cma reserved [ 633.080773][ T6940] cyberjack 9-1:0.69: device disconnected [ 633.243449][ T5835] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 633.664139][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.774145][ T8087] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 633.783291][ T8087] ===================================================== [ 633.790447][ T8087] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 633.798582][ T8087] dvbdmx_release_ts_feed+0x198/0x290 [ 633.804292][ T8087] dvb_dmxdev_add_pid+0xacc/0xb50 [ 633.809468][ T8087] dvb_demux_do_ioctl+0x78b/0xc80 [ 633.814720][ T8087] dvb_usercopy+0x263/0x500 [ 633.819345][ T8087] dvb_demux_ioctl+0x46/0x70 [ 633.824266][ T8087] __se_sys_ioctl+0x23c/0x400 [ 633.829114][ T8087] __x64_sys_ioctl+0x97/0xe0 [ 633.833967][ T8087] x64_sys_call+0x1975/0x3ea0 [ 633.838817][ T8087] do_syscall_64+0x134/0xf80 [ 633.843634][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.849669][ T8087] [ 633.852271][ T8087] Uninit was created at: [ 633.860003][ T8087] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 633.867175][ T8087] alloc_pages_mpol+0x328/0x860 [ 633.872305][ T8087] alloc_pages_noprof+0x101/0x280 [ 633.877464][ T8087] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 633.885386][ T8087] __vmalloc_noprof+0x128/0x1f0 [ 633.890399][ T8087] vmalloc_array_noprof+0x48/0x80 [ 633.896078][ T8087] dvb_dmx_init+0x121/0x930 [ 633.900756][ T8087] vidtv_bridge_probe+0x1b1f/0x2690 [ 633.906251][ T8087] platform_probe+0x213/0x370 [ 633.911117][ T8087] really_probe+0x4d5/0xe40 [ 633.915982][ T8087] __driver_probe_device+0x25e/0x370 [ 633.921408][ T8087] driver_probe_device+0x70/0x8f0 [ 633.926684][ T8087] __driver_attach+0x541/0xaa0 [ 633.931575][ T8087] bus_for_each_dev+0x33b/0x580 [ 633.936663][ T8087] driver_attach+0x51/0x70 [ 633.941198][ T8087] bus_add_driver+0x54f/0xdb0 [ 633.946149][ T8087] driver_register+0x42e/0x6a0 [ 633.951054][ T8087] __platform_driver_register+0x65/0x80 [ 633.956899][ T8087] vidtv_bridge_init+0x73/0x100 [ 633.966215][ T8087] do_one_initcall+0x237/0xbb0 [ 633.971153][ T8087] do_initcall_level+0x157/0x350 [ 633.976449][ T8087] do_initcalls+0x176/0x310 [ 633.981089][ T8087] do_basic_setup+0x1d/0x30 [ 633.985803][ T8087] kernel_init_freeable+0x213/0x460 [ 633.991138][ T8087] kernel_init+0x2f/0x5e0 [ 633.995700][ T8087] ret_from_fork+0x20f/0x910 [ 634.000433][ T8087] ret_from_fork_asm+0x1a/0x30 [ 634.005466][ T8087] [ 634.007870][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.7.345 Not tainted syzkaller #0 PREEMPT(full) [ 634.017295][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.027568][ T8087] ===================================================== [ 634.034786][ T8087] Disabling lock debugging due to kernel taint [ 634.115197][ T8087] Kernel panic - not syncing: kmsan.panic set ... [ 634.121779][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.7.345 Tainted: G B syzkaller #0 PREEMPT(full) [ 634.132716][ T8087] Tainted: [B]=BAD_PAGE [ 634.136946][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.147107][ T8087] Call Trace: [ 634.150462][ T8087] [ 634.153475][ T8087] __dump_stack+0x26/0x30 [ 634.157968][ T8087] dump_stack_lvl+0x50/0x1c0 [ 634.162715][ T8087] ? dump_stack+0x12/0x25 [ 634.167203][ T8087] dump_stack+0x1e/0x25 [ 634.171517][ T8087] vpanic+0x7b4/0x1430 [ 634.175768][ T8087] panic+0x15d/0x160 [ 634.179875][ T8087] kmsan_report+0x31a/0x320 [ 634.184578][ T8087] ? __msan_warning+0x1b/0x30 [ 634.189430][ T8087] ? dvbdmx_release_ts_feed+0x198/0x290 [ 634.195148][ T8087] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 634.200498][ T8087] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 634.205841][ T8087] ? dvb_usercopy+0x263/0x500 [ 634.210645][ T8087] ? dvb_demux_ioctl+0x46/0x70 [ 634.215548][ T8087] ? __se_sys_ioctl+0x23c/0x400 [ 634.220569][ T8087] ? __x64_sys_ioctl+0x97/0xe0 [ 634.225501][ T8087] ? x64_sys_call+0x1975/0x3ea0 [ 634.230525][ T8087] ? do_syscall_64+0x134/0xf80 [ 634.235450][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.241682][ T8087] ? kmsan_get_metadata+0xf1/0x160 [ 634.246987][ T8087] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 634.253508][ T8087] ? kmsan_get_metadata+0xf1/0x160 [ 634.258810][ T8087] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 634.264821][ T8087] ? preempt_schedule_common+0x5b/0x80 [ 634.270440][ T8087] ? preempt_schedule+0x30/0x40 [ 634.275438][ T8087] ? preempt_schedule_thunk+0x16/0x30 [ 634.280969][ T8087] ? _raw_spin_unlock_irq+0x47/0x50 [ 634.286311][ T8087] ? kmsan_get_metadata+0x146/0x160 [ 634.291731][ T8087] __msan_warning+0x1b/0x30 [ 634.296435][ T8087] dvbdmx_release_ts_feed+0x198/0x290 [ 634.302000][ T8087] dvb_dmxdev_add_pid+0xacc/0xb50 [ 634.307180][ T8087] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 634.313263][ T8087] dvb_demux_do_ioctl+0x78b/0xc80 [ 634.318448][ T8087] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 634.324152][ T8087] dvb_usercopy+0x263/0x500 [ 634.328793][ T8087] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 634.334524][ T8087] ? kmsan_get_metadata+0xf1/0x160 [ 634.339852][ T8087] dvb_demux_ioctl+0x46/0x70 [ 634.344614][ T8087] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 634.350057][ T8087] __se_sys_ioctl+0x23c/0x400 [ 634.354927][ T8087] __x64_sys_ioctl+0x97/0xe0 [ 634.359695][ T8087] x64_sys_call+0x1975/0x3ea0 [ 634.364543][ T8087] do_syscall_64+0x134/0xf80 [ 634.369305][ T8087] ? clear_bhb_loop+0x50/0xa0 [ 634.374151][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.380198][ T8087] RIP: 0033:0x7f7e7059c799 [ 634.384723][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.404489][ T8087] RSP: 002b:00007f7e714cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.413059][ T8087] RAX: ffffffffffffffda RBX: 00007f7e70816180 RCX: 00007f7e7059c799 [ 634.421157][ T8087] RDX: 0000200000000300 RSI: 0000000040026f33 RDI: 0000000000000006 [ 634.429242][ T8087] RBP: 00007f7e70632c99 R08: 0000000000000000 R09: 0000000000000000 [ 634.437499][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.445573][ T8087] R13: 00007f7e70816218 R14: 00007f7e70816180 R15: 00007ffc662facb8 [ 634.453704][ T8087] [ 634.457194][ T8087] Kernel Offset: disabled [ 634.461574][ T8087] Rebooting in 86400 seconds..